[ycombinator_acc]

It does happen and is very handy.

Your far-fetched example is easily circumvented with a disclaimer saying this is a form copy (duh). I've never received one that didn't say that.

[ozim]

For authenticated form no problem. For unauthenticated form it is not far-fetched.