In alert-form.php you could put everything under condition osc_is_web_user_logged_in()Alternatively you might look in core files (ajax.php or user_non_secure.php) and block form submission.
Thanks, will add it to list, however it might be very dependant to themes. There is not ideal handling, where Osclass instead of status & message, it just send back number 0-2...