points
I think in most cases it is the effort that is the gate. Ex. you can DDOS most public facing services simply by spamming AI.