Even if it's read-only, it could potentially give the webpage at least knowledge of your file tree. And this is sometimes too much information.