IMHO the problem starts when you need to share your calendar with the outside, then you need to expose that service to the Internet and, to me, it's a whole different level of complexity making sure it remains safe.