At the very least the system should pull configuration info from a trusted source at predefined times instead of being available for it to be pushed at any time.