The usual answer to a DDoS from some users is to add rate limiting, not “remove the service”