I put every site behind the same free CDN tier and forgot about DDoS worries.
Moving from shared hosting to a VPS was the best decision for my sites.
Learned the hard way that an untested backup is a Schrödinger backup.
Would love to hear how you all handle this.