Hugely. If someone does manage to break in, then you've handed them a nice mechanism for downloading and installing stuff too. Better to work out a maintenance agreement with your users, if there aren't too many, or set things up so they can specifically download and reinstall on their own hook (WordPress-style).