Rate limiting is not a security feature you add at the end. It is the difference between a bad day and a bill you cannot pay. Add it on day one. #dev