You have a form on your site where someone can set a destination email address and a hashtag message. Am I missing something or can someone put target@domain.co

You have a form on your site where someone can set a destination email address and a hashtag message. Am I missing something or can someone put target@domain.com and a private thought of a spam message or abuse or anything like that? Trolls will hit it and as soon as bots find it, you are going to get more spam than users by some stretch. If people report you, you will be blacklisted very quickly and your host will get stroppy. I'm speaking from experience, but in my case it was a tinyurl-type site. Even if you require approval from the sending email before pushing the thought, someone can still use Mailinator/similar for that. Personally, the combination of solution-in-search-of-a-problem and this sort of hassle would make this a non-starter for me. I can't think of a single time someone would realistically use any of the modes the site lists. If they used a hashtag, there's no way to handle knowing which email address someone might've used (personal, work, etc). The first-date example had me checking for April 1. "It's all up to Lisa now. If she really wants to get out of there she might check for a bunch of variations like #wannaGetOutOfHere, #letsBounce, #notFeelingThisPlace, #wannaGo, etc." What are the chances that two people on a date use their phones long enough and are both aware of an obscure site to make more progress than just saying "Well, this is very formal. What do you think?"