Um, I don't know what to make of that quote.  It doesn't seem to answer my question.

In any case, I now think we should set some reasonable limits out of the box, not unlimited.  Maybe 100 calls per second, 6 concurrent requests, 2 active requests, per API key.  Or perhaps somewhat higher.