Found & submitted another flaw in MTP: Argon2 segment sharing, described in http://blog.zorinaq.com/attacks-on-mtp/ along with my other submissions.