So you provide an API, but someone was hammering your website with a scraper? That's annoying. Seems like bad behaviour.

I did find it surprising that this article has a whole section on "Challenge 4: Anti-Bot Countermeasures" (and how to bypass them) but doesn't mention giving any consideration as to whether this is a reasonable way to behave.