My two takes on this secure HLS. If you’re a hosting company and can’t handle the traffic, then get out of hosting.

Our job is to deliver our clients’ content to the public if it’s in the RSS, and the user hasn’t said make it private or limit the ability of people to get it, then our job is simple: deliver that content.

Sure, by all means, rate limit it and block ASNs and user-agents, but that is where it should stop.