DDOS mitigation costs are coming down. If you're running a decently sized service and dont have any enemies that want to pay constant rates to shut you down then _should_ be fine. You can even temporarily use cloudflare if you're getting hit particularly hard then remove it when it passes. 100% uptime is a meme and not required for most websites.