The definition of this method as a security risk is overly exaggerated, IMHO. I've still to come across a valid simulation of this setting being used by malicious users.