Can we cap how much we are exposed to?

Yes. You can set a ceiling on usage beyond your included pool, so spend stops at a level you choose rather than running on. You set it yourself or we set it with you when we write the agreement, and you can add a low-balance notification so nobody is caught out.

The point is that your cost is knowable: the agreement is the agreement, and anything beyond it has a limit you chose.