SSH into private machines from anywhere using Cloudflare Tunnel

> By the end of this post, you'll be able to run: ssh $machine_name from anywhere ... a service by Cloudflare ... will filter traffic to your machines through Cloudflare's network, including authenticating you ... your machines won't directly be exposed to threat actors and "1337 haxors".

Won't they be exposed to CloudFlare?

CloudFlare CEO has personally said:

https://www.bizjournals.com/sanjose/news/2013/09/12/cloudfla...

that the company may be required to hand over data to the NSA, and would not be able to tell clients/users about it.

I use an SSH key to connect, so I assumed the traffic itself is end-to-end encrypted. However, I would like to be surer of this.