In reply to Stephen Harris.

I only use the admin account if I need to do "admin stuff", for day to day activities (posting entries, comment moderation) I use a contributor account. Assuming the payload isn't triggered under a contributor account I believe I should be OK, but I will still be very careful.