To point 1, text/plain can be streamed; as for point 2, there may already be limited options, subject to application security audits.

I hate to say this, but if there was one place I'd look for vulnerabilities within a purportedly-secure environment, screen readers would be near the top of the list.