Relative to the XKCD, this is like if someone found out you could vandalize hundreds of thousands of posters and publish it under a US federal government website using an REST API.

Feds getting DDOSed? Nothing new. Public read/write access to a government distributed resource? That needs to be taken offline as a matter of public security.