Errata exists for this version of the document.
See 4.3.3 for a description of this threat.
OPC UA provides encryption to protect against eavesdropping as described in 5.2.5.