Yeah I think we have to do this. One big problem I discovered with the implementation is that there is no verification on whether a user actually shared the link. The application will accept the username param as long as it is present and associate it to the corresponding user. @nat also recently notified me about getting awarded badges on posts she has never shared before.
I’m looking right now to see if disabling the sharing badges are straightforward but I have a feeling it isn’t since those are system badges.