Yeah and it would fail pretty hard while exposing the attacker. It's not really a credible argument for filters because it's already possible.

Hm 🤔