Hey, yes this could be the case.

I'd love to help to tune the routstr code not to behave so that it can't be differentiated from dozens of ddos attack patterns?

It's a great ecash usecase and I believe it can be easily fixed to prevent:

- hitting frequently mint rate limits on read/write mint APIs
- ddosing specifically the mint database through long time ws subscriptions to circumvalent rate limits
- creating thousands of invoices that get never paid

If you need I offer my assistance.