You're assuming that's the only thing it will ever do. Just because you saw that particular code doesn't mean that's the same code served for every possible user.