The colon's a legal character in Unix filenames, so it's possible someone could send you a file named somehostname:foo.tar and convince you to run tar on it. Of course, if you quote the filename or escape the \:, as bash autocompletion would do, it wouldn't be an issue, but I could imagine some possible scenario.