that’s clearly not the danger. make a dumb thing that takes user input (including PII or maybe other protected data), then put it online and charge people to use it without vetting it for security? No, let’s not encourage that.