Yes, I too was concerned about internal heat and also damaging the bond wire with too much current (fuse).
Would it be possible to put a mW limit on a single pin's dissipation? Or, on a "port" (PTA, PTB, etc)
Or, would it be possible to put an upper limit on the mA, say 25 mA as being a safe limit? (that's the highest I've ever seen on a microcontroller)
My application is considering mA < 10 so I won't be near the limits proposed above, but it would be good to know the limit(s) in case I need to drive a higher power device and would be able to compute if I can safely avoid the cost of a buffer (direct drive).