Right, and I am saying that VLC is not only a Desktop app, it has extensive remote capabilities as well: http://www.videolan.org/doc/streaming-howto/en/ch04.htm

Right, and I am saying that VLC is not only a Desktop app, it has extensive remote capabilities as well: http://www.videolan.org/doc/streaming-howto/en/ch04.html http://www.videolan.org/doc/streaming-howto/en/ch04.html and http://www.videolan.org/doc/streaming-howto/en/ch05.html http://www.videolan.org/doc/streaming-howto/en/ch05.html , which means that it is going to get used in ways involving automation, which means it might be injesting arbitrary files. Don't get me wrong, I am not saying that is a good idea (I decided against it), but that the scope of this bug is much larger than just a desktop "Don't open that file then" kind of bug.