Yes, sLysdal, but only if no security precautions was taken by the developer at all. Anyway, one should at most be writing to config files in an installation script or so, nothing more.