@0xabad1dea One thing I would do different regarding tor:

For what I do, allowing Tor access can be very seriously important, I have even been in a situation where I had to use Tor for all internet activity to avoid broadcasting my position.

Therefore, if a site I ran was being attacked over Tor, I would look for a way to temporarily block single Tor exit nodes and clear the block when the offending traffic moves on to another exit node. In my situation as an opposition activist against an open Fascist country, keeping Tor blocked is not an option unless the alternative is that the DDOS threatens Tor itself. In that case I would be obligated to yield to the needs of all other Tor users.

An attacker able to saturate all Tor exit nodes would be unlikely, would be a major problem for all Tor users, and such an event would probably force changes in Tor itself.

Note that this is site-type and content specific: a site used for discussing gaming doesn't need to be accessable over Tor to protect people from harm, an activist site may well have to be.

Personally I detest all this AI slop. I shoot video with real cameras, and if the time ever comes that AI "video" doesn't usually contain obvious errors it will be impossible to prove that say, an ICE agent shot someone for their skin color by catching them on video firing the gun. They'll demand proof the video wasn't AI if it goes to court (or even the Court of Public Opinion) and that may become impossible in the future.