Protip: Whenever you are evaluating a system and there is an unacceptable failure mode and your answer is "let it fail, then blame the user", go back and find a different answer.