[scurvy]

What happens if someone sends a layer 7 DDoS that you do respond to with a 200? Or 300-level?

[sofaofthedamned]

Then you're screwed I suppose. To do that they'd likely be performing some sort of replay attack, in which case you should be mitigating against this. There's no magic bullet anywhere.