If I were a malicious actor with a good way to attack this, I would wait until this was being used in real applications which deal with larger amounts of ETH, and then attack.
Why should I reveal my cards for $3K?
Why should I reveal my cards for $3K?