It's not as simple as you think. The bug also lets people call commands - if not directly, then indirectly. This affects every default mIRC installation where the user explicitly turned on autojoin-on-invite, and works on nearly every network. Obviously I'm not going to go into details about this, but I don't think that the risks should be downplayed (intentionally or not).
