Comment by JHorse

Apart from just generally being insecure, I believe google penalizes what it classes as misconfiguration/bad practices on the server side