>one user has managed to download almost 10,000 copies of the italy-latest.osm.pbf file in 24 hours!

Trash code most likely. Rate limit their IP. No one cares about people that do this kind of thing. If they're a VPN provider...then still rate limit them.