OK, it's even worse that that. Keep in mind that many Widgets access the web, so simply bring up the Dashboard, type something in, say, a name in the Yellow Pages widget, and clicking on any resulting link...which launches Safari, even if it was locked out using parental controls [sigh].
Microsoft Provides Easy OS X Security Hack