Forgot that the debugger allows anyone to run arbitrary code. So that's now off by default.