IP-based mitigation strategies are pretty useless for ATO and credential stuffing attacks.
These days, bot nets for hire are easy to come by and you can rotate your IP on every request limiting you controls to simply block known bad IPs and data server IPs.
Calories are absolutely not calories. Being underweight is not a free pass to the buffet. The habits we create for our kids will become lifelong struggles. Normalize healthy eating and help them learn to make good choices.