Comment by krupan

"But then you need to fight bots day and night and do some serious sandboxing on your server which you might be using for other things and is likely to have other accessible endpoints for people to exploit."

For a static read-only website? No, that's not necessary.