These are interesting hacks and there should probably be some ways to help users avoid being deceived in this way.

However they don't have much to do with the introduction of the vibrate API. What this assumes is that the phone vibration is something the user should or could generally rely on to distinguish between genuine system functions and fakes. That's just not true for many reasons.