Should probably note the stuffing attack for current versions of solidity

[emansipater]

Isn't a huge issue (basically calls to nonexistent code including nonexistent fallback functions currently return some data, which is cast to "true" when checking call success), but given the strong emphasis on handling send failures it's probably worth mentioning even though this is planned to be fixed.