I don’t follow this comparison. Seems like DDoS protection is a defensive measure.