There's also a risk of malware. Some clients, especially those from unverified sources, can contain harmful software.
Some clients also require running a modified BungeeCord server that accepts browser HTTP WebSocket connections. 1.8 Hacked Client Eaglercraft