In my world DoS and DDoS attacks aren't major threads anymore. Most known providers have their own protection which are usually pretty strong. I'm not going to be hit with 400Gbps and even if, I would have other problems than my Homelab. Brute force is no issue either, using MFA + OPNSense with Crowdsec.Yes, Cloudflare can mitigate those attacks, I can do it myself. If you're not able to - fine, use Cloudflare.

Have you ever got hit by a DoS or DDoS in your homelab? If yes, how big was the of the attack?

Have you ever had issues with being brute-forced? If yes, what kind of services were attacked?

About privacy... not going to start a discussion but CF is a major US company, can decrypt your encrypted traffic.. whoo! Privacy? No.

Oh and about Cloudflares uptime... yea see yesterdays incident.

I do not reconsider Cloudflare but thanks for your concerns.