Do you need DDoS protection? If not don’t get it, most providers are quite shady and most attacks (anecdotal) aren’t super high volume or especially advanced. If your income doesn’t depend on availability you can even just ignore attacks until they find something else to do. I only have experience with european and especially german hosters, idk if that helps depending on where you are from, you might want to find something more local.