Comment by can16358p

But can't the bad actors use the same APIs to ensure that it's passing this first?