There are lots of providers with massive DDoS protection capacity specializing in hosting illegal or otherwise questionable content, they just charge more than cloudflare.

Botnet C&Cs, cybercrime forums and card shops all need hosting and face massive attacks. Somehow I never hear the operators of those complaining.