It seems that I need one now, my hosting provider doesn’t offer what I’d expect. Here are my notes and links, …
I found, WordPress DDoS Protection: Best Practices & Tools from WPZoom, which recommends wordfence, which I already have, but it looks like I’ll need to pay for block lists, which I think I need. $179 p.a. for a hobby site? 😲 It also recommends a CDN.