[rtpg]

Not to be too dismissive of this, but for companies trying to just run a service and getting constantly bombarded by stuff like DDoS issues, Cloudflare and its ilk lets them service a large portion of "legitimate" users, compared to none.

I don't really know how you resolve that absent just like... putting everything behind logins, though.

[fake-name]

What you're describing is solved by caching, not requiring JS crap.

So give me xxx minute old stale cached version. I'm fine with that.

[lmz]

Until you get misbehaving users crawling every page.

[userbinator]

Rate limiting works, and isn't discriminatory against "non-standard" clients.