My worry is not so much the front end attack or access, but the data on the hosting servers being peeked at without a record of it, or any hacking required.