1) It's true, that someone could modify the underlying storage. A malicious person can always corrupt data, but this is not the case in normal operation. An option to keep bitmaps, would be a good thing.
2) Another solution would be, that there is an option for PBS to skip backups of VMs, which...