Could you elaborate on that? As far as I can see, one would only be able to "compromise the integrity of the IAL" by adding wrong user+host data to correct nicknames with this command, based on the very nature of the IAL. Why would anyone want to do that deliberately? ...as opposed to accidentally (scripting errors), in which case nothing would be safe.