Ya, too much of a security risk. And personally I hate the myspace-ification some websites have, which is why we only have user-settings based theming.