This is referring to messaging being sent through mist. Mist doesn't care what the data looks like, and won't transform it.
Currently the public-facing websocket client is not allowed to publish messages until this is mitigated, as you mentioned. Any feedback here would be appreciated.