Who holds the keys?
Keep domain registration, DNS, billing, GitHub organization and Cloudflare deployment in accounts controlled by the business. Invite the developer with the least access needed for the project. Store recovery methods and designate more than one trusted administrator when appropriate.
