I guess, but if developers and team can't comprehend the security concerns and ramifications of a change then it should wait until someone does.