Doing absolutely everything useful with that data is "one extra attack vector". That is not any kind of a persuasive argument in itself.