I actually would argue against this idea, it is quite resource intensive to keep your sites up-to-date with latest security patches (think something like webser

I actually would argue against this idea, it is quite resource intensive to keep your sites up-to-date with latest security patches (think something like webservers, openssl, tls cipher suites ...). Putting your site behind a CDN makes you not so vulnerable to these attacks.