3 ms·

ISPs can, but they can already traffic shape, so that isn't really a weakness. Malicious clients can't because the throttling is done per-socket.