I see. A temporary fork of course could create this situation. But its only this particular block that will get rejected, and only if both clients are on different (temporary) forks, right?
I really hope we do not ban IPs for doing that - this will only ban the honest guys who mistakenly had two wallets unlocked, while the attacker knows how to switch the IP. Rejecting the blocks should be sufficient.
Note that the whole situation doesn’t need to be a mistake - many people are using dedicated staking devices and surely want to be free to unlock their main wallet, e.g. if they want to make a bunch of payments. You could argue that the staking address should not be in the main PC wallet, but since Nu doesn’t support watch-only addresses it is the most convenient way to monitor the staking device.
So if I can get a serious problem by doing that (e.g. IP banning, and not just block reject), then I would really like to see an “unlock for spending only” flag.