Good write-up.

Here is Cloudflare's post: https://blog.cloudflare.com/acme-path-vulnerability/

If the author sees this, 403 on your services offering: https://fearsoff.org/services/