They enable executable stack, which is generally considered to be a poor security posture.