The risk is real and large.

And the work to clean up if you get compromised is massive.