Yes, that's reasonable. That's what e.g. mailbox.org does. And they publish periodic reports on how many requests they receive, how many they successfully reject, and how many they have to follow.