Avoid while on line, apache & X as root?


Someone told me that it was unsafe to run apache intended for use as a
local web server while on line (I don't know networking).

Also that it was unsafe to run X as root. I think this one makes sense,
but why would it be unsafe if not online and if the system is backed up?

???

thanks


.