1) how so? Pretty much everything they do for DDoS protection is at their customers choice. You might not like what people want for their site but lets not pretend that most companies aren't very happy with it.

2) Then don't use them? Either they provide enough value to pay them or they don't.