You risk arbitrary code execution without needing sudo too.