is there a good way for a website that has a good reason to worry about #DDoS to allow #Tor access?
something like allowing access to Tor IPs but severely rate limiting them? (just an example, I have no idea if that method is in any way feasible)
or are there really only three approaches: block, allow and CloudFlare?

asking not as a #sysadmin, but as a Tor user who just wants to access the website darn it!