[matt_heimer]

They can use keepalive but it's likely the small sites are not getting enough traffic on the edge nodes to maintain the connections.

You don't think taking a small hit on TTFB is a good trade off for the improved scaling that a CDN offers?

Gone are the days that you don't have to worry about bot traffic being a DDOS. An unresponsive site is a lot worse than an extra TCP/TLS setup.