That's not necessarily true. I know plenty of enterprit level projects that use React that were created with CRA. As long as you configure and secure it, it's the best solution for making a start on a React project.
I recommend you to read this article:
I couldn't disagree with this more. In a majority of cases you don't need any additional configuration.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.