External calls function as the essential foundation of on-chain code, meaning their simple presence should never be viewed as an automatic warning sign. However, there are exactly 2 specific situations that truly indicate danger. The first major issue arises whenever a state update takes place only after the call has already finished. The second risk occurs when execution control is surrendered to code that nobody has properly reviewed.