Assuming cloudfaire and whatever other security things were already going to be purchased and maintained (and they work), does the ddosing actually cause any significant harm? I know whoever is doing it doesn't really need a real reason or even results, but are they actually accomplishing...
Still vastly preferable, and also at least as time consuming, if not less, than closing popups constantly, running virus scans, etc. I see it as comparable to bad weather, which will pass; the constant rain of crap you get on other sites never does.