That's true. I suppose there's a certain amount of trust required. I really only ever disable it on sites that have a good track record with security and provide me enough value. There is risk involved though.