Removal of post-upload-hook

[I'm not on the list, so please CC me on replies]

Hello, I noticed that the post-upload hook had been removed in commit 1456b043fc0f0a395c35d6b5e55b0dad1b6e7acc. The commit message states:

    This hook runs after "git fetch" in the repository the objects are
    fetched from as the user who fetched, and has security implications.

I was wondering if someone could shed some light (or links) on what security implications this hook has?

Thanks,

-- 
Arun Raghavan
http://arunraghavan.net/
(Ford_Prefect | Gentoo) & (arunsr | GNOME)