You'd probably have to limit the allowed number of "guesses" per day/week. But even then there's a risk of people trying to game the system (creating multiple accounts etc)