The security vulnerability will be all on the user side.