Yeah I completely missed this as a security flaw. Time to go deploy a fix...