Here are my two cents.
It is a really bad idea to load unwanted vulnerability.
Parallels Access should be option and NOT a default. Security warnings should accompany its installation.
The next minor release should remove parallel access and only install it as a user option. The release should include a switch to uninstall it as well.
Moreover, a security analysis of these remote access tools should be done to assure that customer credentials cannot be accessed by parallels or 3rd parties that the access code cannot be hijacked by other compromises. Competent security means that parallels never holds user credentials and credentials are always protected by reasonable crypto.
Whenever a company builds access of customer machines into its business model, it will become a target for exploitation by sophisticated attackers, assuming the company is not already a stalking horse for somebody's intelligence service.
Welcome to modern insecurity. Hire a security consultant or two.
Last edited: Nov 30, 2013