Permissions in Script Files

If the scripts supposed to run on a mp mission are in effect downloaded to the client's computer (and even perhaps without his knowledge) and run there it is highly critical as far as I understand this issue. If this is true it is not at all recommendable to join any server?