I can see this being replaced with something automated. As it stands it smacks of "hacker put a text input field to test functionality and it works." I mean, worst-case, they could screenscrape the user's page and pull the Atom URL that way.