I agree with the overall take by OP, but I find this point quite problematic:

> If you have the ability to measure whether bytes are flowing, and they are, leave them alone, no matter how slow. Perhaps show some UI indicating what is happening.

Allowing this means easy DDOS attack. An attacker can simply keep thousand of connections open