Earlier quoted context omitted.
I'm not defending Cloudflare, but what is a better solution? If small websites can just be DDOS'd out of existence because some group thinks it'll be funny, what protections do they have? It takes too much equipment and know-how to stop an attack for people to be able to survive online. The next thing you'll hear about is a monthly service fee to the hackers as a protection racket just like the mob.
How many small websites served by Cloudflare risk being DDOS'd? How many small website owners would incur serious loss of livelihood if they are DDOS'd for a few days? Is DDOS risk so important that the web needs a protection racket? > If small websites can just be DDOS'd out of existence DDOS doesn't destroy websites. It just makes them unreachable until the disgruntled person decides it's been running long enough.…
You can be absolutely destroyed if your hosting provider later hits you as a Website Owner with an excess traffic bill.