They already can. But they largely don't. We still get lots of really dumb requests that don't do basic hiding.