Also something of concern. Seems to only be a threat to the "other Stuff" though. I don't think it would take long from the first few examples of that for clients to start optionally displaying content from tor sites.