I think the question here is: "Who pays for the phone call?"
The best way to deal with DBUS flood is to use kernel's RAM accounting. And then there should be a separate decision about who is going to get "billed" for the RAM.
There are various use-cases here. For example, a privileged system process should never be stopped if its client goes dead.