My point with #2 is that DDoS protection is included with most dedicated server plans. It doesn't cost "significantly extra" as this guy claims- at least I've never seen that.
Vendors like Cloudflare, Akamai and Prolexic sell plans where all your traffic is routed through their networks first, filtered based on various DDoS-detecting algorithms, then sent to you. $$$$