>So if you're using external PRGs the DoCmd function is not going to open extra doors that were not already open anyways. If someone wants to do something bad they don't need that extra door. Closing down the DoCMD is doing absolutely nothing to security or protection of your code.

And even if all such holes are shut, there's still the possibility that your exe can be run from VFP IDE (via "do the.exe") from inside a .prg where you have an "on key label ctrl+shift+F4 suspend". With 101 keys on the standard keyboard, that would be about 800 lines of "on key label xxx *" just to prevent this kind of trick, executing in the first milliseconds of the start, which I guess nobody has done yet. And then there's the debugger and intellisense in the command window, which make the suspended exe open for surgery.

I had to do this only once, some 15 years ago, but I'd guess this gate is still open.