Balance changes outside of transfers are in scope.
Those tokens will make arbitrary balance modifications outside of transfers. Users who supply BVault.sol#depositERC20() with that type of token will lose any rebasing/airdrops tokens, and the funds will get locked in the PoolManager.sol contract.
