Conor,

You are correct that a problem would exist if the $_GET method were to continue to be used for error message handling from payment modules.
However, the correct way to handle error messages that are passed from page to page is to do it via the messageStack and not via a $_GET parameter.

Revising the payment module to use the messageStack will avoid the problem you mention.