I think this is ignoring the content of his warning and is a tautology.

"it's only opens up an attack if you allow the attack vector"