Resisting (D)DoS attacks by light clients

Didn’t we already conclude here that people need to some how pay for light client data? Specifically state proof data.

People already pay for so called “RPC servers”. So a protocol-enshrined data market doesn’t seem far fetched. I also don’t think it’s far-fetched that bad actors will DDOS all full nodes with light client requests. I mean just look at the griefing attack on kusama