Canvas unsafe code in the wild

Can you clarify what you mean by a "safety issue"?