Or be socially engineered into loading a maliciously crafted 'quotes' file or something without being aware of the problem. A little awareness, and an extra switch doesn't harm. It could be far worse, if he were to come back with stories of compromisation and an irrelevant script to blame because he's not sure what to look for.
