I'm certain AOU is aware of the risks since he is a programmer and knows what's going on. As a site operator, he has to balance the features users want to have and the security of the site and users. By making the feature optional, he puts the decision in the hands of the user base to decide for themselves what the risks and rewards are, as it should be. AOU isn't doing anything wrong by offering the feature and we the users bear the responsibility for our own device security. If might say this differently if there was no way to disable the feature, but that's not the case here.