We all agree that websites having the ability to hose up a user's system is just plain BAD. We can fight over what we want to see in the future all day long, but we certainly don't want to see anyone's system damaged because some jerk could play around in a security hole.
Thanks again to all who found and helped to fix the problem.
Think of it like the ancient Celts. They would war amongst one another in bitter conflicts, but if there was an outside threat--they would come together to drive that threat off.