To me it seems a more risky use-case since you don't have control/observability over what an untrusted user is asking for?