And still, failure would be detectable, because you'd stop getting emails. And arguably that's better than false activation.

But the point is that this is open-source. So you run your own service.