Azure DDoS Protection Standard

Hi Team,

Is it recommended to have Azure DDoS Protection Standard enabled for Virtual Network where Virtual network gateways are associated with that Virtual network? This VNG is establishing a VPN tunnel with Onprem VPN Devices.

what is the security risk if I am using basic DDoS protection?