@cfiesler @siracusa Absolutely. Always design under the assumption that some (hopefully a very tiny number) of your users will be evil.