I guess this is just a good indication that at some point, WebODF will need to seriously figure out how and where to secure code... as ad hoc security such as this type of thing isn't likely to greatly affect the overall product security :)