Thanks for linking this! From briefly skimming the write-up, it seems to only cover the “happy” case. Will dig deeper to see if there are any DoS mitigations or validations of correct information. It says that no checks against the chain are made which would indicate no validation for correctness is made.