Exports to `*` (any host) - `no_root_squash` option (allows root access) - Sensitive directories exported (/home, /etc, /var/backups)