Yes, it's a big problem.

Strike has the advantage that they can prevent payments to abusuve destinations, but a "non-custodial" taproot assets usd channel would be even more susceptible

I'm not sure how strike handles it but blink passes the risk to the user (returns funds to user's btc wallet)