Cloudflare_com origin certificate, is it necessary?

Question

Digital certificates

I welcome everyone!
I have nginx, ssl is not configured there, everything is stupid over http, but cloudflare masks everything perfectly and redirects all requests to https.
Please explain why you need origin and is it worth putting it on your server, if everything works like that?
Let me suggest that this is necessary in order for https to work when the orange cloud is turned off.

Answer 1

When you have everything via http, then CF proxies your data, substituting its certificate. From the point of view of privacy and security, this is wrong, because the traffic between your service and CF is unencrypted, therefore, purely theoretically, they can intercept (save, modify) any user data, or yours.