In this specific case, it wasn't requests from the client that caused overload. It was the responses to those requests. So Cloudflare can avoid sending responses, and prevent the problem.

You're right that this doesn't solve all cases, but it would have prevented this case.