I think the poster above you meant that someone could change the command to a malicious one if they found a security hole.