There might be an issue there. Giving update permission on a collection to anonymous might be unsafe.