yes, that's the loophole. it doesn't explain the conditions in which the master invitation takes effect. so if via message or if the master must know who they are inviting are possible exploits. there's also direct contact, they could persuade the master in to taking them in, through a bargain of sorts, deception or even an honest request if the master doesn't see the harm in it.