If an attacker replaced the address, they can just CPFP and still get it.