Hacker News Reader

Sounds like you are involving money. Don't do that.

Plenty of non-profits have been ddosed. Your website is either small or is just lucky to have an audience that isn't inclined to ddos.

Yes. Like most websites.

The threshold for "small" is a lot smaller than it was in 2000.