Point taken. But we're not talking about consolidating holders. You and I will not pool our DRK and make a node. You'll run yours how you see fit and I'll run mine as I see fit. If my 50,000DRK node gets DDoSed, then that's 50 entries you don't have to contend with for an hour or so. Do I care when I'm getting 50 entries while I'm NOT getting DDoSed? My bigass node is just one node. The network will be glad to see me disappear for a while. ;-)
As with government scrutiny in other places, I love being the big shiny target they can't really hit. It lets all the other people scurry around unnoticed... If I'm pulling odds on 50 entries a block, and get DDoSed for an hour or so, I don't care, and that means everyone else can relax, while also getting better odds...
If there are like 10 multi-ticket nodes of 20k dark each instead of 200x1k, it's not that you'll go down and I'll stay up to take the profit. We'll both be eliminated. The less nodes we are, the less force they require to take us all down.
What about a trade off as in a cap of three MN's per address and/or IP.
That could work.
I refer back to; nobody is forcing you to consolidate your nodes. There are merits to both. Put all options on the table and let operators choose.
Aren't they supposed to be behind I2P at some point? The enables the opportunity to reverse proxy, like cloudflare does to banhammer DDoSers. I already know how to chain .onions like that.