which is fine if you deny network connections for it with a per-process firewall. but with a webapp you can never be sure that they won't snatch your documents.