I was not aware of this limitation in github.
The truth is that the implementation would be much simpler if it were as you say for Cloudflare as it is with Netlify. Too bad Netlify doesn’t have DDOS protection, Cloudflare’s unlimited bandwidth takes away a lot of headaches in this regard, otherwise anyone with bad faith can take down your free hosting in a few seconds.