Thank you all for your discussion. I understand that the framework cannot be hacked however personal interaction can compromise security. I was asking for a friend who has to clarify where he got the news. His wording made it seem as if it was not a service provider.
I will check back...