Why do you think that's more reasonable :) To me it seems a more risky use-case since you don't have control/observability over what an untrusted user is askin

Why do you think that's more reasonable :) To me it seems a more risky use-case since you don't have control/observability over what an untrusted user is asking for?