When scrubbing an object, scrubObject() still calls any getter functions that are attached to enumerable properties. This could include random code that was passed in earlier.
Given how the default options are used in the engine, is this worth addressing?