Probably because this #[1] its a known limitation of zaps, either we allow fake zaps or block zapper keys that can’t be trusted, which do you prefer?