I wonder how do they plan for those requests to be authenticated. Easily proving that you are you over the internet is not a solved problem.