Obviously I won't do anything like that!

Nevertheless, some bad actor may take advantage of the simplicity of the implementation (which is, at the same time, also a strong feature of your product). Of course this would affect every user, not just the demo account.

I think this is one common issue with analytics products (Google Analytics itself has ridiculous amounts of spam referrers!). I guess may be a good idea to be proactive and plan some countermeasure at some point.

Happy lunch!