* Cost to build them.
* Cost to keep them up to date in a highly adversarial environment. Note this might mean scraping the solution and starting again.
* Cost of running them at huge scale.
Particularly important is to understand the attack surface is so high and cost to the opposition is so low that people will defeat your approach recreationally just to spam obscenities.