The problem is the attacker could simply issue this event first and then it would be even harder for the actual owner to do anything.