Hacker News Reader

Then anyone would be able to trigger the autodestruct by spoofing their UA.

Googlebot's identity can the authenticated to prevent spoofing:

I actually wasn't aware of that! Thanks for the link.