True, and while Cloudflare is a great company, putting all our eggs in one basket isn't particularly wise. Not saying that this'll happen, but we've seen "great companies" that were great while there was strong competition, but eventually when they became the monopoly began to strangle out anything that they were against. Protection providers like Cloudflare would have enormous power to simply kick out a user for being "too costly to host," like Akamai did to KrebsOnSecurity, and then you'd get destroyed by attacks.

They will direct traffic to your site on ddos if it will affect their infrastructure in free plan. And this will not protect you from level7 ddos.

Cloudflare only works for http/https.

Whoah, I did not know they had a free plan for personal use. Thanks for the tip!