Thanks for answering my question! Like the rest of everyone here, I need to look into it more. When I first analyzed it, it looked like that attack was possible. A test net type implementation for select users would be really cool to see and clear up a lot of the confusion.