Not sure how well we could utilize a CDN with the current architecture of the site, there’s just not enough static content. I do plan to fix that, but it’s a major rewrite which I have taken up on and off for a long while now.
Oh, how awful! Maybe it would be safer to initially block ALL IP addresses, and then selectively enable only those belonging to trusted freepers. You can have them provide their IP address in the Paypal transaction comments, or with the check.