rcmail_autoselect_host security implications

[af123]

Hopefully I'm missing something, but doesn't the recently applied patch 'of Clement Moulin for imap host auto-selection' mean that anyone can use my RC installation to access their mail at any ISP server just by POSTING with a _host input ?