Right, however, the MITM attack would also come at the cost of causing the rest of the connection to fail.  You could also do fun stuff like sending the sha256-mac of the hostname using the DH key as the MAC key.  There are lots of fun ideas!