Reading comprehension isn't your strong side, huh?
Please find me a wallet that prevents the transaction ID from being modified in-transit. Thats all I said. There are none so if your tracking payment by transaction ID's which is something almost everyone does then your vulnerable.
You're technically correct on that point. But it's only one exchange, mtgox, that allowed this limitation to grow unchecked into a major problem, you agree? The problem is removed if only sufficiently* confirmed transactions are accepted. (* I'll admit I don't know how deep into the chain they need to be before the risk is neutralized)
EDIT: I'll admit, I reacted unfairly to your first post on this. You did, in fact, only point out it a real flaw. But maybe you can see that this thread is about discussing mtgox' responsibilities. And they *are* fully responsible for not locally adressing and containing a know flaw. That's the basic point I would make here.