Yep. Somewhere a long the line running executables arbitrary third parties sent you became common practice instead of something you warn people not to do.