But what would be the actual risks with the current system?

as in, when the database gets out on the street vs the risk of a local cookie being hacked.


[Linked Image from siemons.org]