Of course, I thought about it
The attack won't work because the spend proof must be sent from the owner's address, not from any address.