just kidding of course, because the real trick is having datacenter/network providers that can handle a Layer 3 DDoS. I know Josh Moon has grievance with Path, but I don't know the details. That's a problem I'll deal with when I'm ready to deploy and switch over. An auto-scaling (to a point) fleet of unmetered 1G VPS' is probably fine in the interim.
Plus, js challs can't be used for anything that supports third-party api consumers (phone apps). 🤷♂️
Mostly just a PoC and starting point :)