This tool clearly have security issue. Any user can use the tool without logging in; the edit summary does not indicate the operator; and it's not possible to stop malicious users from using the tool without blocking the bot. I think we should require logging in to use the tool and make all edits from their own account (therefore they can be blocked if misused), given the operation is synchronized. Also, it's better to deactivate the tool until edits are attributed (and thus wrongdoers can be discovered).