Thanks for the feedback! I think you'reright about a foolproof system. A goal is to minimize the friction and leakage. To do that, there's a whole universe of possibilities beyond just whether or not to enable the downvote.