I don't see any discussion of threat vectors on that page, but Clevis clearly fails to mitigate the threat vector you describe.