Won't you get targeted by anti-bot systems pretty quickly? Are you doing these changes on the user's computer or in the cloud?
I'm surprised this wasn't covered in the blog or FAQ. Seems like an important detail that security-minded customers would care about.