Shockingly poor security to let an application have totally unrestricted access to the web with no review, of course this kind of stuff is going to happen