Could be a good idea.
Would need a lot more thought, though. :)
It can be rather vulnerable indeed, when the sys admins don’t protect it properly or some web app uses it and the devs of the web app suck at properly implementing security. ~Points sharp eyes at DokuWiki~