I don't really mean you, but let's say you are compromised... if I put a localhost http server up on the web using your stuff, am I now compromised? Not clear how this would work...