[tracker1]

You mean throwing up a Meteor app with a direct db feed and no fine grained security at the server side can lead to exploits?