They will require the requester to prove they control the standard http(s) ports, which isn’t possible with any nat.

It won’t work for such users, but also wouldn’t enable any sort of false claims over a shared IP.