While this is an awesome idea, I can't help but think about the humongous potential for abuse. Were the logs to be leaked, stolen or otherwise compromised, you now have a goldmine of potentially vulnerable systems. Even if the results weren't logged, you'd now have a list of systems where the sysadmin wasn't 100% sure.

"For your security we do NOT store your IP address/result combination"

So the IP/result combination is not stored, but technically the IP address and result could be stored without there being a relation between them?