Right… anyone ‘observing’ my login is compromising it.

Standard feature in cloudflare, checks all passwords going through their endpoints to see if they have been compromised before. Alerts the site admin if it has been. My dashboard is littered with them lol

The article covers that.