If we tunnel our selfhosted app traffic through gluetun with wireguard and make it publicly accessible by cloudflare tunnel will our traffic be safe from spying/MITM by cloudflare?

[Greatz08]

i did read some stuff regarding cloudflare tunnels working like they do MITM and decrypt packet and analyze it and then re encrypt the packets with its own self signed certificates and make it publicly accessible. Still just wanted to clear my doubt so asking here