Don't Google, Amazon and Msft have their own CDN products with DDoS protections? I know they probably aren't at cloudflare's level of sophistication but in a few years time you don't think it will be a native offering from the big three as well as cloudflare duking it out in this space?
They do, but think about it. These companies charge money for traffic, so there's always a bit of a conflict of interest. My company has tons of customers from companies using cloud solutions who don't want the hit in pricing.
I do think one day they'll squash everyone out, but not anytime immediately.
Any of the players in say, the typical Forrester wave report is fine. However, don't necessarily trust the report's findings...just for the list of names.
One big thing, to me. Call each as you would as a customer. Apparently some are easier to get ahold of than others.
Pick one where you can get a competent human on the phone quickly. Because when you're getting DDoS'ed and threatened by your bosses at 1AM, it's going to be a big peace of mind.