And easy to DoS because monitoring all those invoices means keeping state, which takes resources.

Especially when creating a zap request (i.e. binding resources on the zapper) is free, just takes sending a nostr message.