It seems anyone who uses distributed queries may have a major vulnerability here.