It seems so. I guess I do not understand where the many requests/DDoS limit is and the ramifications it may entail in some jurisdictions, although, I explicitly wrote “DDoS” in the title…

I had the impression that as a lone actor, lending CPU cycles, you do not fall into the latter category, since the state-sponsored attack, which I support in this instance, is carried out by a different entity.

Perhaps, you would even argue that you have plausible deniability when accused of carrying out such attacks, just like the proprietor of a hacked device cannot be held liable (I assume). Definitely good to know.