Hi @chiefmonkey, all sites that are published in Webflow are using http, so the front facing public content is not secured using https.
Cloudflare only adds the https to the url, but content between Webflow and Cloudflare is still using http, so you are right, it is not a true secure solution from end to end, that will come when SSL support is introduced.
All information that is transmitted in a Webflow form submission is encrypted with SSL behind the scenes and form data submissions are secure, even though an http front facing url is used.
I hope this helps.