If the customer would rather build their own system than risk talking to someone on the phone where money might be discussed, I'm not sure that the open-source vendor is the problem.
The contention was that Cloudfare could have just signed up for the cheap support plan if they wanted private problem reporting, and I don't think that would be as easy as was suggested.
