You should worry about it, and fast, as every professional and actually usable and maintainable setup uses one, and your refusal to use one, thus relying upon a patchwork of unknown stuff from unknown sources, is one of your biggest exploitable (as in I do it to clients while testing their network every day,) vulnerabilities.

So far, I've moved a lot of people, including my own online auction company, off of your platform because getting AJAX code to work reliably with it is near impossible due to lack of object-relational mapping.

I could go on and on, but quite frankly, you need to start from scratch. Right now you're just trying to slap a lot of icing on a poorly-made cake.