And here I am believing rate limiting remote commands is a pretty default thing to do, especially if the commands switches power under load.
Sure, this is targeted abuse, but your device should not accept unauthenticated radio input that allows destruction.