Is it possible to put the app behind "Cloudflare" now to tighten security?

I dug through the old topics, and it seems a bit problematic.

Here is one of them: Is anyone else using Bubble with Cloudflare via Proxy?

To answer your question: Nope. Bubble already uses Cloudflare and it would be a huge technical undertaking for Bubble to let us builders have full control over how our Bubble apps interact with CF domain management.

Unless you’re familiar with setting up a reverse proxy, and willing to pay the additional cost, the easiest way to have control over your Cloudflare domain is to shift your Bubble app to a subdomain and then point the root to that subdomain. You’ll then be able to leverage the full features of your CF managed domain.