Absolutely, messing with commits is more invasive than messages. It gets worse:

"Sent from my iPhone" appears in the authoring view, and you can delete it.

Co-authored-by: NEVER appears in the commit message UI - it is added without the user even seeing it.