I hope everybody will require AUTH soon, Snort has supported AUTH for a long time but it seems like no other clients want to implement it.
Another good way to track this outgoing cost would be to track the number of events served, if clients are bad at querying or are inefficient then it's going to cost the user more so it will also force client devs to create more efficient queries