regardless of the replacement cycling attack, it's a good practice to limit the size of your routed HTLCs anyway. few are the payments that need more than 1mil sats, and rebalancers will use whatever you give them anyway and do it in parts

default node settings are to have the limit at the size of the channel itself, which is wayyyy more than needed and is just needless risk. do it right now to reduce any kind of risk, as theoretical as it might be