Arbitrage trades and related activities like MakerDAO keepers would be legitimate transactions vulnerable to this (essentially someone else extracting the value from their discovery). Granted that is a very small subset of users.
If anyone could just replace an address and execute a profitable transaction by being first on existing contracts, surely miners would be doing it already, no?
To a large degree not yet.