So real talk, all you folks bloviating about "lazy devs relying on Cloudflare" to protect from bot swarms:
What is my option, eh? I have a small website. My hosting provider's answer to the botswarms is "use Cloudflare". Best I can manage on my own is to toss 403s at all of China. It lowers bandwidth suckage, but isn't really an answer. I'm limited in what I can install.
Every suggestion I get is: self-host and install <FOSS thing>.
There has GOT to be a better answer.
*crickets*