undocumented .NET risks