This is like saying that HTTPS is insecure because I've written a program that just executes whatever response it receives to an HTTPS request.