File can be dangerous because you might not know what it contains. If you run a script a random user gives you in Discord, it could expose your domain or running a "game" could also expose your token and when your token is exposed the person who has your domain can use your account without email or password.