So are you okay with trusting a large amount of money on a site where a random person was able to execute arbitrary JS on their customers' computers?