I think that nowadays all providers have protection against DDoS. And if suddenly there is none, then 1) do not choose such a provider 2) Buy any server, but send traffic to it through, for example, Cloudflare