It seems like any on-chain user generated content is likely to be a problem; arbitrary binary data can be encoded as text. I suspect this problem already exits on the bitcoin chain though, so it's not like it's unique to Steem.