Don't allow the initiator to _drop_ the request once started.
Initiator pays all costs (I think this is already done?).
Then any extortion has to happen up front, and it becomes much more obviously extortion.