Thanks everyone! The thing about limiting memory usage and timeouts makes a lot of sense.
This also means that we can use the memory usage / timeout stats for the calls in question to guide how high the cap should be. That’s a much more “engineering” approach to things than just looking at what others do, so thanks for that. 
