Not really? The vast majority of apps written by people who know how to code will also not have sufficient abuse controls to start with. Actually most will have

Not really? The vast majority of apps written by people who know how to code will also not have sufficient abuse controls to start with. Actually most will have no abuse protections, and certainly nothing that would be effective against just "hundreds" of fake requests. Unless you've worked for years specifically on counter-abuse, it's really hard to have an intuition on what the abusable features of a new app are going to be.