The first mover could always invalidate the unpublished transaction by sending the coins to himself ? In the worst case, both parties would attempt a double-spend.