I don't think you can delete functions up the prototype chain this way :). And it's all client side.. so worst case is they hose their own session correct?