Yea it can be defeated. Just look for charaters you know. For example I saw something like 3d%META

Just do a find and replace < for 3d% whoa all the < are back find all the vowels. But I found they use a few different codes for some letters. If would be a pain in the ass to decode but can be done easily with time.
My New site OpenEyes