With nginx-proxy-manager which uses Let's Encrypt for certs you can... This isn't the gotcha you think it is.

I don't have access to the server.

It can be run anywhere. You don't need it on the same server. Cloudflare isn't running on the same server either.

Cloudflare is a checkbox.

And you only let them see every bit of traffic to and from your site in exchange.

What a deal.

You changed the subject btw.

I didn't. I said that Cloudflare is the one that allowed my http only site to become https.