There are plenty of ways to handle double voting without plaintext user strings. The fact that it's done this way is just lazy and poor design and doesn't actually so anything to prevent a rogue instance from vote spamming with fake users.