Not only what Sam Gentile notes on his notes on developers liability, but other reasons are that most people with MSDE in his machines, are developers who don’t care (or know) enough to patch their systems, and who run privileged processes behind the firewalls.