This is a good workaround to a problem that shouldn't exist. I feel it's important to clarify this is certainly not more secure than using a client-side solutio

This is a good workaround to a problem that shouldn't exist. I feel it's important to clarify this is certainly not more secure than using a client-side solution that doesn't involve duplicating bandwidth. (Full disclosure I make an iOS app that is also likely going to be affected by these rules, so I am triggered)