Although the post e-mail includes a hard to guess alphanumeric string as the only mitigation, it would be better if the feature could be enabled at the user’s discretion. As a security minded user, I sleep better at nights when I am able to disable features that I don’t use and therefore reduce my threat vector.