Pretty lame „exploit“ tbh, at that point you can just paste a screenshot of your doc into word and celebrate.

Also, the mitigation can probably be fooled with ligatures since they are only verifying the letters alone as far as I skimmed.

Someone could also just make a font file that swaps all of the characters around.