but we have well established ways to deal with those... test/validation sets, n-fold validation, etc.
Even if there was some overfitting or data contamination that was undetected, the result would most probably still be better than a hand-made decision tree over the same data...