Not a whole lot but there is at least robots.txt and scraper blocking like Cloudflare does. At least there are norms and copyright law. What are the norms for serving content from someone else's PDS? I think not asking permission is the default?