Should we really try to handle cases that are Ajax logic and not visible by simple users and don't expose sensitive data?