The mere fact you are "aware of this type of attack" implies it is a flaw. If there was no flaw, the attack wouldn't exist.