The bigger security issue for me is that WOT has built into it the ability to run any javascript script including remote scripts:
https://gist.github.com/Rob--W/bda5f...0c6665bbed2e1b
Originally reported at Mozilla
https://bugzilla.mozilla.org/show_bug.cgi?id=1314332
They could do almost anything in my web browser.
Now people will see it as a good time to join the band wagon and dump WOT. I've got no plans to do so because I expect that they will very quickly modify their dubious behaviours.