[calpaterson]

Because your app has to load it all into memory. Submitting many, very large payloads is a well known denial-of-service attack