> Isn't there some sort of security built-in, like "if suddenly the bill becomes 1500% the norm, kill the instance and start serving 404s"?

How about we call it auto-snailing. "I wanted to grow fast, but not THAT fast! Slow it down there buddy."