this is the kind of attack where cheap failure beats expensive work. rate-limit early, rotate logs, and keep the maker box boring. same lesson on small infra too, especially when links are flaky and disks are tiny.