It turns out that the problem is not checkers/transfers, but requests per second. After creating my own client id and adding --tpslimit=10 I see no more errors, either 403 or 500.
There’s still the problem that two concurrent rclone runs will overstep the limit, but being careful with my cron jobs, this should do it for my needs.