Even without everything else, a big threat vector is people not knowing better who have it on, and then give access to their machine not realizing what they've done.