The original exploit shows that you really can't trust any digital device connected to the headphones. USB doesn't provide any isolation, it can be used for input as well as output.