That is tricky. What stops a developer creating a service worker that catches all the requests to the billing API and purposely fails them?