As brought up on Discord, by submitting a reward block replacement ahead of time to nodes, the reward block can be replaced by either a malicious miner or a malicious user. The nodes will use the transaction they got first, even if they didn't have the user block yet.