One can still have a public accessible resolver, so long it is TCP-only. Amplification requires UDP spoofing.