but I'm just the junior code monkey following instructions.
You're the junior code money who will be fired when your company gets owned up by your foolish actions.
Don't play the game of "it'll never happen to me" or "security is just some theoretical risk". People can and do own-up small companies, and when it happens to yours, your fingerprints will be on the trigger when the CEO comes looking for a scapegoat.
Play it safe. Make sure you play no part in a decision that could very well lead to your company losing all of it's trade secrets and customer details. You really don't want to be the guy that let that happen.