1. Agreed. That's an avenue by which a vulnerability in the server or communication channel could be exploited.

2. It doesn't exist. The code was written in the same form it was uploaded.