Btrfs: broken by design?

I wonder how this interacts with quotas. Could a malicious user fill a quota with pathological files that actually use vastly more disk space? The alternative is that a user fills their quota without having anywhere near that much actual data.