Array size should be limited to mitigate resource exhaustion attacks. This can be done using maxItems. You should ensure that the subschema in items is constrained too.
OWASP API4 2023 Array Limit
Message: Schema of type array must specify maxItems.
