Keep in mind that the BCM already has the ability to piggyback on the production interface if it decides the dedicated interface isn't connected to anything...

Keep in mind that the BCM already has the ability to piggyback on the production interface if it decides the dedicated interface isn't connected to anything... what's to stop it from doing this in a mailicious scenario and fire off some garbage-looking dns/icmp/whatever?