There should be a third option: allow but give fake data

And it should be default.