.rhosts and .shosts are a concern because they allow login without password authorization. .netrc is a concern because it can contain plain passwords to accounts, for easy login as ftp.