Sure, it's reasonable to stop unauthorized apps from DDOSing your service. But is it reasonable to need to make a request to their cloud service to open a door

Sure, it's reasonable to stop unauthorized apps from DDOSing your service. But is it reasonable to need to make a request to their cloud service to open a door right in front of you?