This is a good workaround to a problem that shouldn't exist. I feel it's important to clarify this is certainly not more secure than using a client-side solution that doesn't involve duplicating bandwidth.

(Full disclosure I make an iOS app that is also likely going to be affected by these rules, so I am triggered)