@badkeys Is there also a security risk, or is just about using another format than was initially specified?