> services that can be used for amplification attacks, are they constantly getting patched to prevent the latest iteration of attack type?

unfortunately, no.