Actively used?

Is this module actively used anywhere? Seems to work well.

Any security concerns besides the requirement to secure against bots?