Ok, this is hacker news, so let me put this in terms legible to a hacker: If "dropped queries" are forced to "grant permissions," you're establishing a system that rewards a targeted "dos attack."

That could potentially lead to some downsides.