No, but a few done, precisely because they partner with Cloudflare: https://www.bluehost.com/hosting/info/cloudflare

No, can you link me to some of these "smaller hosting providers [that] have DDoS protection"?

In fact, I can't find any matching that description.

Hetzner does. I guess it depends how much smaller is "smaller". DDoS protection I think is one of those things that demands a certain size.

Hetzner is 20 years old company with ~300 employees and ~230,000 servers. Of course on scale of AWS, Google and others it's fairly small, but CloudFlare is not all that much larger.

is this down voted because it's an endorsement? It's not, just an answer. https://faq.nearlyfreespeech.net/full/attack

>> Don't lots of smaller hosting providers have DDoS protection?

It is pointless if you have a small pipe. Pipe jamming attacks are way too common and small vendors are almost always unable to cope with that.