This gives a lot of power to outside users and opens up the possibility of of spoofing attacks.
The r-commands are pretty much a convenience and it is highly recommended that you do not use them. However if you must then be certain that no users do rhosts with +'s.
