This is the key. Model your threat and act accordingly. There's (mostly) no reason for Joe Bloggs to want to protect themselves from a well funded state actor

This is the key. Model your threat and act accordingly. There's (mostly) no reason for Joe Bloggs to want to protect themselves from a well funded state actor but they may want to prevent themselves being locked out of Google services because some bot triggered a threshold.