That blocks all sorts of abuse, but a targeted exploit would be delivered on a clean domain.