Well, it could end up serving JSON with an HTML mimetype, and potentially dropping some defensive headers.