Well, a developer's local machine will typically be much less likely to be compromised than a always-on, publicly-broadcasted machine.