it's not a theory, i wrote a key miner and it does over 100k new pubkeys every 5 seconds

CF is only stopping the more obvious bulk traffic attacks, not protocol level ones