[jamespo]

Not only are the alternatives to CF as you acknowledge but the number of sites hit by DOS attacks is low in the grand scheme of things.

[nitrogen]

The sites most in need of free speech protection probably also need more DoS protection (see DoSes of GitHub, for example).