Hello all,
To preface, I am a newb

Can someone explain to me how unsafe unconfirmed transactions are please? What is the vulnerability? I have very little experience in this arena, but it seems like some sites (luckybit) can take an unconfirmed transaction and let you bet it on a drop, and other sites require a similarly small transaction to be confirmed.
Why?