You know, a company COULD make this easy if the response path contained an encoded string that would decode to the email it was sent to. Then no one but you could write the review and they, like Amazon, would know it was legit.

But that would be extra work for them :)