The real question is, what happens if you remove all restrictions and give it write access (more broadly, the ability to make any HTTP request whatsoever).