The unpleasant truth is that most remote-access mechanisms are overly permissive, and not built for critical operations.