The Russian government being stupid and evil isn't really Cloudflare's problem to solve. Neither is the lack of abuse prevention from VPN providers necessitating the extra challenges for VPN IP blocks. And, now that botnets are the norm, residential IP addresses too.
Obviously, Cloudflare's tools aren't the solution. The web needs to be closed down behind paid or real-identity accounts for websites to ditch these protections. It's only going to get worse from here.
a $10 VPS hosting a static website can trivially serve a thousand pages per second.
I have a few fuckass websites hosted together on the cheapest VPS I could find, and the last time I got an automated alert about downtime was a decade ago.
there is simply no incentive for anyone to ddos a random website.
>The Russian government being stupid and evil isn't really Cloudflare's problem to solve.
didn't imply it was, it was just an observation that everyone uses Cloudflare now.