@AlecMuffett One of the things that really "levelled up" my WAF implementation was losing the ability to block "bad" IPs (because I'd multi-homed onto Tor) I'd still argue I'm better off as a result of IPs being unimportant