Putting even a very short lived cache in front of it basically removes the issue. But perhaps asking people to understand, for example, nginx micro-caching, defeats the purpose of WP.

I'm not terribly concerned about WP performance, it's just a blog, after all - it's the security issues.