I mean I get it, as an admin there's only so much time you want to spend to support everyone's favorite setup. So "security/safety" is kind of a simple wave-off. It's sometimes just "we don't want to spend the time to figure out how to lock down this thing."