This message was deleted.

I don't think there's inherently a security issue with enabling websockets itself, but that all depends on the backend app you're providing access to. If you're depending on a security device that can't inspect websocket connections for some reason, that could definitely be a cause for concern.