The thing sent to their service shouldn't be known by anyone but the user, then it can't be stolen from the website.