This will only result in people finding clickjacking methods to trick you into pressing. I would prefer that you can only trigger the request (using JS) on a top-level click-event, similar to how audio works on iOS (maybe Android too?).