> Agreed that using this as safe predicate is a security hole,

+1