Wouldn't that be still better than current situation where you can't run any public service anymore without DDoS protection? The attackers have it too easy. I

Wouldn't that be still better than current situation where you can't run any public service anymore without DDoS protection? The attackers have it too easy. I don't see how would that preclude strong authentication. We would need TLS all the same.