This, to me, is the main reason why it's a bad idea to host and maintain a presence with a CMS yourself. Most likely you are not an entity that has the capabilities necessary to do so, neither are most of the Hosters that even offer "managed Drupal/WordPress/... Hosting".
It takes a relatively large team to reliable shield software as complex as modern CMS from abuse and the mitigations have to be employed so timely that one cannot wait until this is high enough on someone's to-do list that has to do this for 10 different CMS.
It takes a relatively large team to reliable shield software as complex as modern CMS from abuse and the mitigations have to be employed so timely that one cannot wait until this is high enough on someone's to-do list that has to do this for 10 different CMS.