The code side is T336, but since the code was already inconsistent about allowing them (supported only in op and op_defaults), this can be considered independent.

If practical, disallow node attribute expressions (and rules containing only node attribute expressions) in meta_attributes blocks via the schema, with an XSL transform to drop newly invalid expressions/rules. If it's a hassle, we can skip it and just let the code ignore them.