（一）应税交易的购买方为自然人；
Hook --|Forwards genuine appendBuffer| MSE[MediaSource API]
，详情可参考51吃瓜
Fermaw cannot realistically slow down the stream more than that since it would stutter real traffic that has a download-y pattern. There is a possibility that he could enforce IP bans on patterns that display it but it would have to risk blanket bans against possible CGNAT traffic. There are ways to get around it but it prolongs the inevitable.
Capability-based file APIs — use openat2 or similar to confine file writes to the work directory, preventing path traversal via ../../etc/passwd