A bit of a tangential question but are there any guardrails around the capability that exitmap uses to perform its function ?

Could someone DDoS Tor by abusing exitmap ?

You can configure number of hops per circuit and that includes single hop circuits. So exitmap doesn’t add any functionality that isn’t already part of Tor.