@catatonicprime @matrix "That said, in our brief correspondence with the reporter, after outlining our position and asking for clarification or a sketch of an actual attack, we agreed to add the check as a defence-in-depth and to preempt future doubt about whether this is a vulnerability. " This is what Matrix security team already agreed to do in a blog post, it's just not seen as priority.