Comment by kijin

Buttflare exposes the origin IP only if you previously exposed it (e.g. by continuing to use the same IP after signing up for Cloudflare), temporarily exposed it (e.g. by turning off the "cloud" button for a few minutes), or have a bug in your code that exposes it (e.g. by sending emails or requesting external resources from your origin IP). If you pay $200 or more and never do any of these silly things, your origin IP should be safe.