I think it should be, when the tax reporting requirements are so granular; and in such cases, the effect is analogous to a timing attack.