If you think it's a security risk, then don't enable. It's pretty simple. It's very transparent about how it works.