Maybe a sentence about the security implications of 'xhost +' would be appropriate (at least read 'man xhost'). You'll definitively want to turn it off after your development session, as everyone will be able to open windows on your screen...