I don't understand why the current setup for rate limits wouldn't be sufficient to stop this kind of thing.