Granted that they can go ahead and put a $NET switch inside an office building, but the content on that switch still has to be synchronized with the rest of the $NET network worldwide. Putting a switch inside an office building doesn’t magically bring the entire Internet into the office building.
So you still need an ISP to get you from the office building to “the internet” don’t you?
Wouldn’t it be more like:
Employee computer → wireless hardware → Cloudflare hardware → routing hardware → firewall hardware → routing hardware → “the internet”
Unless the browser on the employer computer makes a request that is already cached inside the Cloudflare switch; in that case:
Employee computer → wireless hardware → Cloudflare hardware → wireless hardware → Employee computer