Well, if it's a security concern, perhaps the code author should check the response code rather than blindly assuming it worked.