Question: When linking to an external .js file, isn't this a security risk?