Based on the number of cloudflare customers who give me a captcha (or 2 or 3) or just flat out block me, I'd say they are either incompetent out they don't care.
Since I know someone who works there and they are highly competent, that kinda narrows it down some.
I'd wager it's a pro for their marketing teams, tho, without ever in their lifetime meeting a client who would ask to verify their claim 😆
Would the person you know take an interview with us? It could be anonymous, as long as they did some kind of proof that they did work there. If so, DM me or other encrypted messenger