I'm looking for ways to defend user privacy and push back against authorities
Which authorities?

There are many different authorities in the world, with many different (world)views.
but I have no intention of supporting terrorism or stolen funds.
It sounds like you want to have the cake and eat it.
3. Using Cloudflare to mask the server's IP address.
Cloudflare is not going to help you prevent legal issues.
OP, you should read
eXch's post history. Start from the beginning, see how they
were "pushing back", and eventually caved in.
As theymos puts it:
This isn't as free a world as it was when Bitcoin was first created.