I think it's unsafe. Somebody may just pass $vars into other view and cause security vulnerability since attacker may pass any parameter to vars. I think we should never automatically register non-core views for ajax/view.