Ben, you say the unauthenticated OEmbed endpoint is NOT rate limited?
However, right on the bottom of the page you linked:
https://dev.twitter.com/docs/embedded-tweets
It says:
Cache the oEmbed response on your server. The oEmbed endpoint is rate-limited, so make sure you are not fetching it for every pageview you render.