even if *MY server* is protected from harm... the existence of
an unprotected... input box of some kind could theoretically
allow code to then manipulate less secured sites. My site shows
up in their system logs, I'm flagged as a malicious site, shows
up on those "sites to block" lists on ISPs and boom, my site
becomes inaccessible -- fasctinating! (no sarcasm here (I rarely
do sarcasm) ... "