1.) DDoS protection isn't really needed by everyone. It's great for those who need it, but most do not. If you offer it, please offer non-DDoS filtered services at a lower cost as well.
2.) Also depends on the use. For a dev project, something not mission critical or just for deploying a VPS I...