I run multiple websites since I have been roughly 14 and I never had any of those problems. I am not saying they could theoretically happen. What I am saying is that to most people running small websites they don't.

I don't use cloudflare because there was never a reason to. And if there was a DDOS I'd just wait. My websites are important to me, but I don't give a damn if they are down for some time. This isn't critical infrastructure.