is it just me or does the flash/silverlight crossdomain.xml seem like a really bad idea, implemented poorly?