You can create contracts that do not start with "con_"

[throwaway-lamden]

Steps to reproduce: Submit the contract directly through the submission smart contract with another smart contract. Example: Contract Currency (case sensitive)

This is a massive vulnerability, because now typos and messed up capitalizations are possible attacks.