> which will then result in you setting a value for "toString" just below

The idea was that toString would not be used on this object. But while saying that I realise that e.g. "hasOwnProperty" is, doh. So still attackable, you are right. Hm. Possibly to get full security all names should be prefixed then with some kind of namespace.