It's already too late
There's already plenty of abuse of free text. A recent Tales from Tech Support on reddit involved a hotel using it for credit card info, with the software OEM putting measures in place to trap such stuff, up to and including taking all suspicious numbers in free text and running them through the validator. Hotel responded by breaking the numbers across lines with asterisks in between. No doubt the OEM will respond, and the race will go on.