It's well known and documented that SharePoint connections may become throttled, mostly if the user issues a lot of requests in a short amount of time (Microsoft Docs).
The documentation also states, that the throttling is not only based on the actions of the single user, but may involve other parameters as well (like applications in a tenant). Furthermore, more drastic penalties (like a ban) may be imposed, if the user does not obey the throttling, but tries to push it.
The question that arises - and which I couldn't find information for in the documentation: What if a bulk operation is split up and performed by multiple users (all authenticated etc.)? Would that be allowed? Or would one risk to be banned (e.g. all the involved users, or the application, or worse)?