There is no competition for ddos protection unless you enter into an arrangement with akamai or fastly, which won’t happen unless you have the traffic and the $$$ to support it.

Cloudflare can soak up volumetric traffic at scale. Crowdsec cannot do this, because the “crowd” par of crowdsec is rulesets, you are still doing all the heavy lifting with your own infra.