[Kiro]

That's why you use something like this, where each request incurs a cost for the attacker so it doesn't matter if the origins are distributed.

[hot_gril]

The attacker doesn't have to calculate the puzzles in one central place. It can do that on the hacked devices.