Clients could probably hook/trap a fake buffer exploit for protocol compatibility without the security concerns. This ends up becoming a game of cat and mouse resulting in even more intricate technical workarounds and hacks.