[banthar]

The problem with scp is that the trust also needs to go the other way. There is a lot of ways ssh server can trick the client into doing bad things on your local machine.

[dec0dedab0de]

That's not mentioned in the article, do you know if it is worse than just normal ssh?

[banthar]

First issue mentioned: CVE-2019-6111 is an example of such attack.