If you xhost +machine you are allowing any user on
machine complete access to your X display.
That means remote users can do lots of nasty things like:
- destroy any (or all) of your windows (xkill)
- open up any new windows on your screen
- view the contents of your screen remotely
- log your keystrokes (capture your passwords)
- generate any X event
xhost + is even worse.
