Your HTTP/3 endpoint is only as patched as the QUIC library behind it

Why an advertised header limit does not prove enforcement, which QUIC libraries fixed QPACK amplification, and which are still open.