Update: after talking with a pool owner, I came to realise this is a notable attack vector, particularly once the database is implemented

GingerAle asked: Can all of the awesome monero pool operators configure their servers to function as remote nodes?