A safeguard doesn't have to be a revert.

A safeguard could be rate limiting. And or the ability to disable an API key or whatever the equivalent is.

This actually seems pretty reasonable to me.