title: Mongo ObjectIDs: Safe to use in the wild?
body: <p>I'm designing an API that interacts with MongoDB.</p>
  
  <p>Now the question is, if it is <strong>safe</strong> to use the raw ObjectID to query for objects etc. Could any security issues arise when using the OIDs directly (e.g. in queries), or should I encrypt/decrypt them before they leave my server environment?</p>