Or just sending it a tiny zip bomb, or even just some sh*t right out of /dev/random

Bots are pretty good at detecting and preventing this kind of issue. Dumb clients would still be affected.