How do you propose that WP solve DoS attacks against their application?
This script simply doesn't seem particularly slow to me, despite messing with the parameters a bit.
https://wordpress.com/wp-admin/load-scripts.php?c=0&load%5B%...
Perhaps most people here are missing the fact that you can hit literally any part of WP a lot and it will break.