> Are DDoS attacks and bots really that big of a problem?

They are to the kinds of websites that Cloudflare takes an active stance in deciding whether to serve/protect/censor or not.