It always amazes me the number of SaaS solutions that don't implement rate limiting, then tell us not to worry about it when we ask how hard we can hit their APIs, and then complain that we're hitting their API too hard.

My favourite response from one of a suppliers who hadn't implemented rate limiting was "Please stop, you're making our database cry" :D