Also something of concern.

Seems to only be a threat to the "other Stuff" though.

I don't think it would take long from the first few examples of that for clients to start optionally displaying content from tor sites.