Subject On Connect triggers are dangerous, aren't they?

I am reading message Yahoo! Groups

and I wonder is there mechanism to prevent this trigger become dangerous. E.g. if there is the slightest chance that error will be thrown in the on connect trigger then the database will be completely unavailable. When any block can be solution, but it is not 100% either. Some uneasiness is about using on connect trigger feature...