Blocks that contain transactions with absurdly large TX fees would not be valid, hence why it would have to be done same time as a hard fork and would have to wait until there is a reason to do a hard fork.

If the TX can't be put into a block then the sender is safe even if the client didn't protect them, they can still use the inputs for something else.