Hacker News Reader

afaik meant to alert and mitigate, not protect. there are ddos attacks that get through cloudflare's lower tier plans

Yeah, many DDoS attacks get through cloudflare's lower tier plans, in fact bypassing cloudflare free is considered the bare minimum for a "stresser".

That’s literally what it’s there for

No, it is there to make money, if their free plan included perfect DDoS protection no one would get the more pricier ones.