Imagine your API suddenly receives 1 million requests in a few seconds.

Maybe it's a viral product launch.

Maybe a client accidentally created an infinite loop.

Or maybe someone is deliberately trying to overwhelm your system.

Without protection, your servers could become overloaded, response times could increase, and legitimate users could start receiving errors.