There are no guardrails because they could easily be removed and exitmap's intended use case (verifying exit relay integrity) is far more important than its potential for abuse. Besides, the Tor network has seen several DDoS attacks over the years and I'm not aware of any that used exitmap.