There are plenty of sites that use more than one parameters. It's true that a lot of sites now use the history API instead of url parameters but you can still find plenty, and you have no garante about the parameters order.
Any site with a search page that have a few options will probably use url parameters instead of the history API. It's easier to parse and will end up being shorter most of the time.
Well for youtube it's quite easy, there are only 4 useful parameters that I can think of, the video id v, the playlist id list and index if it's a playlist and the time t if you're sending a specific time in the video. Everything else can be removed.
Here's what uBlock Origin with the AdGuard URL Tracking filter list:
You don't DDOS through a VPN. The first D is for distributed, you do it from a multitude of devices, often hacked ones from a botnet. So DDOS attribution is hard. And if you want some scale you reflect the attack on some other machine that runs a service that allow for amplification, making attribution even harder.
I've never experienced any breakage.