If a deliberate covert channel is the best thing you can come up with from a vulnerability, you usually don't have much of a vulnerability.