I feel bad for Cloudflare saying this, but I really think this shows we need to democratize DDoS protection. It's become essentially mandatory if you're running a site which might face controversy, and in the long term I'm not sure we can rely on the continued goodwill of a handful of companies to make sure it's widely available.