For this use case it really is. The number of DNS providers that have support for SSL at the domain apex using ALIAS or ANAME records could be counted on one hand.
You don't have to use any of the CloudFlare specific features, but their DNS management is really good.