A client of mine asked me this question. I am not even sure what to reply ? I am no security expert, just a web dev. What can must I say ?