13 is no less problematic, because there's no explantion who decides what activity is authorized and harmless.

It was supposed to be User's Agent, dammit.