Yeah. I have some theories about using it to test aws acls and map out access to systems using it, which could prove incredibly valuable. I think as long as it can't be used to execute code when a remote site is curled, its probably fine