Since some responses (for instance weather or dictionary) are way larger than the queries, and since dns.toys accepts requests over UDP, it may be used for reflection attacks with amplification. I don't think it is currently a deadly risk for the Internet :-) but may be some rate-limiter would be a good idea.