This is an area where they are allowed to think yet another record setting DDoS attack first and bad config second.