Comment by rbren

The prompts contain e.g. a terminal UI, which gives you root access to the machine. If someone can access that UI and its backend, the can do whatever they want! So make sure to put it behind a firewall or basic auth or something else.