The EC2 documentation specifically warns against allowing yourself to be tricked into loading your metadata for someone else.

So yes, there are probably lots of services which get this wrong; but they did at least get a warning about that particular failure mode.