If you can afford to invest in building/buying it then add rate limiting. With that in place the only person they can hurt are themselves when they go over the

If you can afford to invest in building/buying it then add rate limiting. With that in place the only person they can hurt are themselves when they go over the limits. It requires engineering and negotiation with other teams to roll out though so your success at implementing this can vary depending on the organization.