R/w access to your production database is still a problem, though yes less bad than world read/write.
And also relies on the target being patched against any Linux EoP...