Safety risk?

We used the shortcode option in http://www.gravityhelp.com/documentation/page/Using_Dynamic_Population to define a form with dynamic prices. This works fine but it seems that you can override the pricing defined in the shortcode by using the query string method. Is this a safety risk and if so, should we use another method for dynamic polulation of the price field?

I suppose it would depend on your sales and quantity of stock. Are they so huge that you send out orders without verifying prices? I run a site using FoxyCart, that has the same "security" issue.

Perhaps you could create a function that gets called after a form submit and ensures the price matches the product number, or else returns to the form with an error.