> How would you deal with DDoS attacks?

That's the open question.

Cloudflare doesn't have to charge a fee for every http request, although transaction fees do seem like the elegant solution.