Pointed to origin IP

That’s a MX record, indicating that email should go to your server if someone were to try to send an email to your domain. Since Cloudflare does not proxy mail traffic (unless you’re on the Enterprise plan) it has to return the real origin IP if someone (anyone) tries to send email to your domain.

A solution to this is to use a “real” email provider like Google Workspace or Office 365 instead of one provided by your host. These also have the advantage of always being secure and providing you with more than just email, while a lot of email servers provided by your host are not always updated with the latest security patches.