If that's the case here, then no proper experience should ever result in a user getting this.  If an improper experience is occurring (identity forgery), we should do something like WP core does, like `wp_die( __( 'Cheatin&#8217; uh?' ) );`