I worked at a major tech company in 2018 who didn't take security seriously because that was literally their philosophy, just refusing to do anything until it was an absolute perfect security solution, and everything else is wasted resources.

I left since then and I continue to see them on the news for data leaks.

Small brain people man.

To some extent that's true, but anyone who builds network software of any kind without timeouts defined is not very good at their job. If this traps anything, it wasn't good to begin with, AI aside.

I bet someone like cloudflare could bounce them around traps across multiple domains under their DNS and make it harder to detect the trap.

Yes, but you want actual solutions. Using ducktape on a door instead of an actual lock isn't going to help you at all.