I can imagine an unethical candidate reposting a duplicate job (or several copies) and then replying "sorry, no thanks" to the competition.

This introduces an interesting dynamic: how can you verify that a post you're replying to is genuine?