When I worked with Guillermo Rauch of Vercel, back when it was ZEIT, he shared with me a viewpoint that I found refreshingly unique and insightful - one among m

When I worked with Guillermo Rauch of Vercel, back when it was ZEIT, he shared with me a viewpoint that I found refreshingly unique and insightful - one among many - that I still hold to this day. Every usage of your service is an attack. Corollary, you're only not under attack when nobody is using your system. By treating all usage as an attack in some way, you can better model and measure what is a malicious use of your system. Further (and I think the point he was more trying to make), you get out of this double sided coin of "acceptable" usage and "unacceptable" usage. In a sense, 1% is quite large. Especially when you've classified bot/malicious usage based on abnormal usage, globally, that's not negligible. Not at Cloudflare's scale. Just wanted to share.