this will open lots of possibilities for large apps and will make Pocketbase 1 step closer to being able to be used for production, but this idea might cause a lot of problems for servers, so I suggest to making it rate limited by default and that it requires authentication methods like needing a Pocketbase's admin account password to stop DDos attacks, it also needs to have a way to make api rules changes (prevent api rules changing on admin/manual created collections by defaul) and a way to difinshiate between auto created collections and admin/manual created ones on the admin dashboard
I hope that this idea will get added in feature releases as it makes making large app easier to make