Whoever their host is, they already appear to have some type of load balancing based on the four IPS. But I would also agree that a free cloudflare account does wonders for most WordPress users. But that's probably mostly because it filters out a shitload of bots and known bad actors. Just make sure you set up your origin certificates if you use a cloudflare account.
Yeah, you might need some combination of fail2ban for rude AI and cloudflare caching or something.
Whoever their host is, they already appear to have some type of load balancing based on the four IPS. But I would also agree that a free cloudflare account does wonders for most WordPress users. But that's probably mostly because it filters out a shitload of bots and known bad actors. Just make sure you set up your origin certificates if you use a cloudflare account.
We are already using cloudflare.
Have you also enabled Bot Fight Mode? (There's a setting to "Block AI bots" that seems useful in your situation)
~~I shall mention it to my web admin~~
(Edit): Bot fight mode breaks wordpress' commenting system, which ideally I'd like to preserve.