It isn't just "theoretical", those are feasible attack vectors.
Anyways thank you for mentioning Trampoline payments, I've learned something new.