I don't think that this is thought of as an attack vector as much as a leak or a crap vector. If your confidential and clever trade secret technique leaks into

I don't think that this is thought of as an attack vector as much as a leak or a crap vector. If your confidential and clever trade secret technique leaks into somebody else's code (or could have leaked) you may lose trade secret status. If you have a corporate policy to point to, you can claim that any leaks are due to unauthorized activity and thus the trade secret still stands. On the other hand, if you import somebody else's proprietary code, or GPL'ed code, or buggy code without realizing it, you face different risks. Being able to point to an established policy against using code from these tools helps with the defense against trolls who assert some vague kind of theft.