Be VERY careful with this sort of advice: "Infrequent user actions can lead to complex server actions."

Malicious users use that knowledge to craft disproportionally powerful DOS attacks. Your site is as vulnerable as the most CPU-expensive feature.

At the very least, rate limit those features.