Cloudflare for SaaS: your old provider can silently keep your domain

My apex domain kept redirecting to the old host after migration, despite correct DNS and certs. A stale Cloudflare for SaaS custom hostname was to blame.