Even if not concerned with security, it opens a pretty easy DOS window. Authentication happens after forking of a new backend. That's not exactly cheap...