Anonymous users should not be allowed to create persistent objects (= data stored in the database). If anonymous users are not restricted from creating data, it is possible for a hacker to overload your database and app by creating an unlimited number of objects.