There are some measures in place to prevent bots and click-fraud. DOS is less of a concern, as everything is serverless and based on CF/S3. I'm actively experimenting with pricing and it could well change in the future. You've given me plenty to think about!