Well, I use the free plan. I don't get denial of service attacks, I rarely get over 100 threats a month. Cloudflare stops potential threats, make them do a captcha verification..Failure results in being blocked.
So, I'd say stick with the free plan. Don't expect the free plan to stop ddos...