Cloudflare is the only company that provides DDOS protection services for small websites while everything else is inferior as well as hyperinflated due to being targeted at major companies.
We need a company to provide DDOS protection services that will serve us and only us while being content neutral in terms of profiction site policies.
The design flaw is not the internet, it's the server.
If you have 100 nodes with an IPFS file then they'd have to DDoS 100 networks, some of which may be universities or other places with huge bandwidth. If IPFS were to more often cache slowly downloaded files then the resources would 'route away' from any network attack.
You want to lock up the data/code behind a server, then you have a ddos problem.
What's needed is a reason for people to host their own data. Built it and caches that protect from ddos will appear.