But they can stress your servers with tons of requests. The point of requiring registration is usually to prevent DoS, not to prevent the models from being used for certain purposes.
You can easily limit the damage with a Captcha or similar. Anyway, it survived being in the from page of Hacker News for a couple hours, so I think it's fine.