Forgery is forgery, and this is a fundamental flaw in the ERC-721 token.
Provenance matters, and this is more than a shot across the bow. This is a direct hit on trust.
I only have to fool you long enough to get the tokens into my wallet. This kind of forgery seems to do the trick.