This is highlighted quite nicely by The Unofficial Apple Weblog: http://www.tuaw.com/2005/05/07/the-problem-with-widgets/ Evidently it's possible to have a Dashboard widget installed just by visiting a website.