You'd have to have the slowest site on Earth to not be able to serve legitimate crawlers. Have you ever truly been DDOS'd? I have. I actually had to start self-hosting my website because back when I used Cloudflare, the people who'd DDOS my site would just take down Cloudflare's servers. They're not even a very good protection racket. They're just in it for the money and power.
Bearing in mind, this was a decade ago, and the backing tech changed since then... but at the time, the site was mostly classified car ads. Each page delivery tended to have several dynamic SQL queries to deliver the page itself, but also related content, most popular content, etc.
There was no caching and really normalized data structures on the backend when I started. During my time there, crawlers/scrapers quickly became more than half the requests to the site. Going from about 1M page views per day to 30M was crushing the database servers... I took the time to denormalize and store most of the adverts, and some of the other data into MongoDB (later Elastic) in order to remove the query overhead in search results... It took a while to displace the rest as it meant changes to the onboarding/signup funnel to match. I also did a lot of query optimizations, added caching to various data requests and improved a lot of other things.
That said, at the time, the requests were knocking over a $10k/month database server. Not every site is setup as static content... even if a lot of that content can and should be cached. All to service a bunch of crawlers that delivered no eyes and no value to the site.
I have the opposite experience. I was not able to reliably keep my website online until I bit the bullet and moved over to Cloudflare (pre-AI).
> They're just in it for the money and power.
I would wager it's impossible to buy a product from a company that is not in it for the money and/or power. Especially in comparison to Microsoft, Google, Meta, etc.? I'm trying really hard to empathize with your point of view but I can't relate at all.