There's probably heightened risk of having an unpatched vulnerability exploited if you keep processing the payload past the point where you suspect a bad actor is on the other end.