This is a very, very valid point. I'm going to mention this on the website & even advise people to run the client on an isolated machine (instead of their daily driver gaming rig).
Thank you for pointing this out.
Also, one of my friends working on this project is a sophomore in the CS dept at CMU, and given your interest in distributed systems & DL, would it be possible to meet up for a couple of minutes and discuss security a bit more in depth? (if yes, I'll shoot you an email)