Every network has & in chantypes, as it's part of the IRC protocol, so any network with the owner mode +q should have both. Lots of networks have owner mode, since it's part of UnrealIRCd.
Similarly, and as I alluded to before, other networks have even MORE user modes which can cause problems:
NETWORK=euIRCnet WATCH=128 SAFELIST PREFIX=(qaohv)*!@%+ CHANMODES=bewI,k,flBL,cimnprstACHKNOQRSVWXY CHANTYPES=#&+ ...
If mIRC hotlinked according to 005 on the above network, +foo would hotlink a channel.
There are also networks like IRCNet which are even more problematic:
IRCNet supports this:
<<Server>> irc.powertech.no 2.10.3p3+hemp+r aoOirw abeiIklmnoOpqrstv
<<Server>> MAP PREFIX=(ov)@+ MODES=3 CHANTYPES=#&!+ MAXCHANNELS=10 NICKLEN=9
TOPICLEN=160 KICKLEN=160 NETWORK=IRCNet CHANMODES=beI,k,l,imnpsaqr :are
supported by this server
Where !foo would hotlink a channel. Confusing much?