Well the average website isn't going to be able to protect itself from DDoS attacks or easily provide local cache copies of its content in multiple regions all over the world or create secured tunnels protected from general attacks. My company was affected by this and we are putting in contingency plans for this happening again but the whiteboard that we've created with all the features we need to reinvent is very full...

Why reinvent the wheel.

It's not lazy, they just spend that time on other features.

The Internet is way more secure today, partially because of centralised security efforts. Like if a site is behind Cloudflare you might aswell just not try.