Don't blame on the protocol what can be contained locally.
So your saying we should ignore all the bitcoind API documentation which tracks by txid and everyone should be responsible for making their own systems for tracking payments?
Reading comprehension isn't your strong side, huh?
Please find me a wallet that prevents the transaction ID from being modified in-transit. Thats all I said. There are none so if your tracking payment by transaction ID's which is something almost everyone does then your vulnerable.
Any bitcoin-QT since 2012 idiot.