I missed to specify MANDATORY replay protection. As far as I understand, SIGHASH_UNIFIED facilitates opt-in replay protection, correct? And only Shrike and Bcashjr Wallet currently support SIGHASH_UNIFIED. Non-technical users could unintentionally move their corn being unaware of optional replay protection. So, in my opinion, mandatory replay protection would have been safer.

What's about my second concern above?