Are Safe Lists Really Safe?