I've thought about this as well but I was not too comfortable with it.

As I understand it it is a reverse tunnel from your internal network to cloudflare? If your device is compromised it may lead to an attacker using that tunnel to access your internal network through the host device?