On our university lab, the main reason why most of the savy users would have "xhost -" on their login scripts would be to avoid being shown not so convenient images at the wrong times.