I would think an SPA design would suffer the vulnerability of eventually running out of governance while the user was interacting with it, as each call to request a URL burns 10 units.