You could be. But you won't be. Getting denial of serviced on the web running a personal site is like getting attacked by terrorism. Sure, it happens, but it only ever directly effects the lives of less than half of a percent of people even with the most generous definitions of "terrorism". It's the reactions to it that cause damage.

And it's the same reactions to it on the internet that hurt and not the DoSes. Just run your website. If it gets DoS'd no big deal. It's not like you even need a single nine of uptime consistency.

I've run my for 20 years from my home connection, I've been a jerk on IRC, I've used it for gaming clans, I've hosted and continue to host tor onion services. I have never been DoS'd.

At all my past jobs we've been hit with DDOS (either directly or indirectly via our customers). If the odds are like terrorism I must work at firms with the world's unluckiest businesses.

Sounds like you are involving money. Don't do that.

Plenty of non-profits have been ddosed. Your website is either small or is just lucky to have an audience that isn't inclined to ddos.

Yes. Like most websites.

The threshold for "small" is a lot smaller than it was in 2000.

There are a lot of people in this thread who have very valid complaints about the web, but don't make any sense at all in context. This one is a great example. Sure DDoS sucks but what at all does that have to do with the difference between today's web and the web of the 2000s? Today's web offers DDoS protection (optionally) and the web of the 2000s did not.

The first DDoS happened in 1996. Absolutely nothing to do with the current topic at hand, completely off topic.

It is way easier to ddos a website today than back in the 2000s. Back in 2000, you could block almost every ddos simply by having gigabit. Now there are millions of more exploitable devices.

Do a search, https://www.google.com/search?q=stresser

An attack that can cripple all but the largest networks can be had for $5-10.

I always take those speeds with a grain of salt as it is likely that they dont actually provide those speeds. What is someone gonna do if the speeds are wrong? Sue them in court for not commited the crime they are paying to commit enough?

Or to massively decentralize so that you need to bring down the entire network.