people should use p2pool. inherently ddos-resistant, avoids centralization of power into the hands of pool operators, and a bunch of other nice things.
Yes, that's all fine and dandy, but not really profitable seeing as it pays nowhere near what PPS pools pay.(Unless you have like a billion mh/s.)