Having exec() enabled is a HUGE security threat. Exec() allows server-side shell execution. On a webhost of any kind, that should ALWAYS be disabled as someone can hang the server using SLEEP, reboot the server, shutdown, you name it.
From what I've saw, many things ended up being enabled during...