Any system that allows you to create 10000 accounts is already vulnerable to DoS. Also, as vintermann suggested, you can use a faster, domain-specific database

Any system that allows you to create 10000 accounts is already vulnerable to DoS. Also, as vintermann suggested, you can use a faster, domain-specific database if you're concerned about this becoming an issue. And sometimes edge cases like this aren't worth considering until you hit them.