I am sympathetic to your reasoning. I am terrible at design, but I think almost anything would be better than what you have. An obvious banner works well. Allowing a few attempts works well, but in that case, how do you rate limit someone executing code without an account?