Free use without registration -> free to anyone and anything -> easy to abuse at scale, with no way to restrict use.

You can limit it a lot to minimize the abuse. In free entrypoint, set token and context limits to be very small. Limit to 2 prompts per IP or something every X hour. That is already a substantial limit where bypassing might not provide much benefits.