An indirect system like NEOM's former qode system does bring a level of security with it vs. a direct encoding implementation. If a misuse of the code is identified, you can turn off the redirection at the server and send a consumer-friendly message back to the consumer.