Many other websites enforce rate limiting or IP banning for public pages (using products like Cloudflare). Why is this not legal?