The difference is that when you buy a vps you aren’t handing over all your access creds to random developers.
And “harming lemmy” may be an intent that sparks a DDoS but there are other intentions that should make users wary. Harvesting creds of people who reuse passwords across accounts is an easy example that could have more serious implications to the individual user.
No nested SQL queries allowed.
Edit: it was for a built in query language to populate dashboards (think Jira JQL meets Domo).
I had some inefficient SQL queries that meant we had to put some guardrails around user input so others didn’t take down prod like I did