At which age and for which purchase was the first mortgage?
Does it feel odd to anyone else that a platform for something this universally condemned in any jurisdiction can operate for 4 years, with a catchy name clearly thought up by a marketing person, its own payment system and nearly six figure number of videos? I mean even if we assume that some of those 4 years were intentional to allow law enforcement to catch as many perpetrators as possible this feels too similar to fully legal operations in scope.
Rate limiting in itself requires resources that are not always available. For one thing you can only rate limit individuals you can identify so you need to keep data about past requests in memory and attach counters to them and even then that won't help if the requests come from IPs that are easily changed.
Cookie banners are completely unnecessary as long as websites only use cookies for technically necessary purposes (e.g. login). The problem is that a lot of websites want to sell your data to hundreds or thousands of other companies. So yeah, we could cut back a lot of red tape there if we just outright banned that sale of data completely.