Grubbs et al. acknowledge in their CCS'16 paper that Attacks 1 and 2 are out of scope for Mylar: