Yeah definitely a concern. Probably need a sandbox and separate user for defense in depth.