I think you guys are thinking a bit too far out of the box here... This protocol idea of mine is intended for control from other applications. Not FULL control... for example, aim:goim?screenname=SCREENNAME&message=MESSAGE
If you use aim, you probably know there are quite a few different parameters that can be used in it's protocol. I have never heard of REAL exploits being caused from this, as they still continue to use it and add too it.
Why do we add scripting control to our bots? Custom commands? Plugins? So the user can control each little peice more and more. If you think somebody is going to use this protocol for an exploit idea, what the hell do you think scripts could do???
Like I stated zorm, if there were to be a set specification on this protocol, including things like bot identifier, uhm.. web interfacing, bcp integration, botNET integration, etc etc; I think it would be very useful. But I don't think you guys agree, so I'll just use it for my own application. Thought I'd share the idea anyways.