Seems like the solution to the DoS concern is to just limit the site to whatever amount of RAM is currently available on the device - that's what every other browser/OS combination other than iOS seems to do without issue.