Yeah, you're right I guess I was throwing that into availability. I don't have a good solution except for aggressive rate limiting, but that doesn't fix ddos, or poorly configured clients that can hammer endpoints while loading.
Discussion
Yeah, spam media too/CSAM.
About bandwidth, you need a front-box somewhere that takes the majority of the load with caching, and having that onprem is expensive due to it becoming DC uplink level pricing.
Yup. I've been thinking of a tiered arrangement to keep cost down as well. Smaller boxes on edge, larger boxes behind and big ass bulk and cool caches locally.