Well, that's true, it has to be enabled. Is that a security threat? Maybe, maybe not.