I sympathize with their plight. I worked way too many hours the last 2 weeks when bots took down my servers, too.

But rather than try a grass-roots effort to try to change legislation, we tweaked the rules on the AWS WAF. They have built-in rule sets to do targeted inspection levels, which brings in far more capability to block headless browser-based bots.

By all means, talk to your reps about bringing change to our governmental systems. But also learn what options exist right at your fingertips. The AWS WAF is imperfect, to be sure. But you can do more with it than was described here.