Reply to post:

“It's an example of two systems without a security vulnerability coming together to create a security vulnerability.”

Disregarding valid characters in an address looks like a security vulnerability to me if it allows scams like this.