I read through the spec a little[0], the thing with this attribute that I'm worried about is if the page is rendered or of scripts are executed. If they are (mainly scripts) then you could see a legitimate website become attacked and have these placed in without anyone knowing or detecting for possibly several days.

     [0]: http://www.w3.org/TR/REC-html40/types.html#type-links