+1
And making a site secured is expensive, unsecured site is easy to be hacked so that the FORM submitted thru it may fall to anyone's hand that may claim thereafter the ownership of the funds we are trying to claim back and protect.
Form submission will be valid only after user confirm validation email, hence nobody else can claim anything, only the owner of the email account. It is secure. Almost everything can be hacked, the question are costs of that hack. Hacking some server is not cheap, no way there will be hack on it. And even if they hack it, the only think they can steal is V2 pass. Karm wallets are somewhere else and users will validate via email confirmation links.