Or do the rational thing and rate limit GET requests to human speeds.
Based on what fingerprint?
Fingerprint: *