One thing I have not seen mentioned is the ability for people to place malware and nasty surprises in Google+. For example Wordpress does not allow you to post anything but the simplest HTML code. Can someone confirm that script type exploits are not possible from within Google+?