I think many people here are overthinking it. OP is mostly talking about simple business website not huge platforms to host. Ddos protection is kind of irrelvant for such small projects. But anyhow there are so many local hosting companies (europe) for at least the last 10 years that provide a free ssl cert, one-click options for wordpress etc. It’s really not that complicated.