Sooner or later it will become an attack vector. Jack Dorsey published a bounty some time ago to work on an alternative. So I guess there's already something in the works. Check his note here: