$me is an unsafe identifier to use within a multiple-evaluating command such as /timer at any time, regardless of a malicious server. Bad/insecure scripting is something mIRC simply has no control over.

Spelling mistakes, grammatical errors, and stupid comments are intentional.