Although I was concerned about seeing this topic in public, and introduced by a total newbie to the forum, I commented. Not adding ideas to how to break the system as much as what we should be weary of.
Nevertheless, I don't believe such vulnerabilities should be discussed in public. I have thus suggested that this thread / topic be removed.
Although significant improvements can and should be made to provide a trusted way to discuss these things, it should not be public for obvious reasons, and should not allow anonymous newbies, no matter how well intentioned, to participate. Trust must be earned, and that come from being known, and that takes observation of person's actions and words over a period of time. Instantaneous trust is worthless.
I suggested keybase as a secure app we could use for secure, private comminications. Most of the devs are already on keybase, as are some witnessses, includning myself.