So it would be an excellent topic for an article "How can a theme pose a security threat". May be with some demo code. Because in general I've seen a lot of people ask that.