Is it too much to ask them to setup a netscanner that notifys the users when their IP is exposed to the greater internet, so that they don’t have a misplaced faith in the advertised anti-DDOS system(whether free or paid)?

But not to be relied on.