Good idea, bad implementation.
Don't use sp_OA, make Web calls from SQLCLR instead - everything will be better, from security to performance.
I have implemented something like this myself and the idea of using OLE has never even crossed my mind - it was done purely in C#.
Regards,
Maciej