I had the same concern but looking at the demos, they run it in a sandbox so the worst case failures should be constrained.