Or hetzner has also DDoS protect for all their customers. Seems like a lot less rip off and scam than AWS and Cloudflare.

Set your TLS a low number, and you can swap whenever you feel like it.