This is what I expect from any serious hosting company know: DDoS protection for every customer as part of the service. It's part the hosting duties and should not be offloaded to any third party company, say Cloudflare.