Any public page can be tricked to display the login form

You can add ?action=login, ?action=register parameter to any url on the site and Theme my login will think that it is the login page and displays the login form. It think it is not a good thing.