Unless I’m missing something, timestamps seem to be HappyOrNot’s only defense against malicious users.
While that works against a toddler who relentlessly taps the unhappy button, it’s an ineffective defense against a manager intent on manipulating feedback.