I like the detail from the top comment of replying w a 429 after a many second delay. That would mitigate any retry storm.