[taeric]

I think the more concerning facet will be proving that the response actually came from the user.

Which is ultimately why many systems encourage you to go through already established and protected schemes for doing things.