It’s not a valuable target platform, but you don’t need much CPU or memory to do a DoS. I know how to pull all circuit breakers in my apps and those endpoints WILL see even a puny node trying such shenanigans. Also, DDoS mitigation will kick in almost immediately.