[murderfs]

Ratelimiting doesn't solve anything, you can just parallelize your queries across IP addresses.

[overfeed]

The whole "defense in depth" principle disagrees. Having a layered defense can not only buy defenders time, but downgrades attacks from 100% data exfiltration to <10%

[arcfour]

Increasing the barrier to entry from "trivial" to "less trivial" is always a good start.

[pragma_x]

Yup. This is some of the stuff that gets missed when understanding Security.

Ultimately, you're just buying time, generating tamper evidence in the moment, and putting a price-tag on what it takes to break in. There's no "perfectly secure", only "good enough" to the tune of "too much trouble to bother for X payout."

[selcuka]

https://en.wikipedia.org/wiki/Nirvana_fallacy