Just sharing a really good resource about securing your site with Cloudflare. There are 4 short tutorial videos showing exactly what to do to make your RW websites fully secure: https://httpsiseasy.com/
The same chap that made the site above has just published another video showing exactly why you want to be doing this (for anyone that doubts the value/need for https). Is a 20+ minute video but definitely worth a watch.
I’ve set up a site with Cloudflare, but Bluehost seem to be providing me with https anyway now that google is requiring it - given that - is there any point still going for Cloudflare?