That's because most of the site, including the code, is reasonably well compartmentalised. You can sometimes spot actions that can't be triggered by human guests, but mostly if something is off limits, it really is off limits.
SMF is pretty solid these days.