Comment by rvnx

Also, DDoS or not DDoS it's very reasonable to believe that an individual (or even a company) isn't ok for a 100K USD bill.

Billing amounts should go through quotas requests, so you can explicitly ask to be migrated to the upper level, but by default have an active safety net.