I basically post a warning that says "be aware that someone might attempt this." There's unfortunately nothing I can do about it with the way Syncthing is currently architected. We haven't had any malicious users yet but I'm sure we will eventually.

Fallback is just to provide a static .exe on the mirrors and leave the Resilio Sync node running alongside it.