Cloudflare could cause drop in Google SERPS positions if there is incorrect host configuration. Technically the traffic passes through the proxy (filtered by several layers and firewall rules). Infact cloudflare can influence rankings. For many small sites you dont even need cloudflare. Google has said speed is not everything.

A decade ago, a web connection is made only between a server a client direct. Today cloudflare acts as third party which could slow down traffic. Besides cloudflare hosts hundreds of sites on same plan and there is no possibility to get a dedicated private ip under free plan.

I have been investigating this problem for a while..

Investigate these issues if you see a huge drop in google organic rankings.

SSL issues

Incorrectly configured SSL can cause issues. Fix mixed content. You must install valid SSL cert (eg. Lets encrypt) in your local server, else it wont work.

Robots.txt

Check this file for causing any blocks preventing google to crawl your site.

Rocket Loader

Know how have issues with SEO. Better off you disable.

Crawler Hints

May cause issues blocking off unknown crawlers.

Bot fight mode

Can block bots from unknown search engines and bots preventing you go get good backlinks.

Hot Link protection

Could prevent your results appearing in Google discover

Firewall

Check your WAF firewall rules that could prevent certain IPs or sites.