The pson files are read and evaluated as script in order to get the hash tables populated in memory. This allows (feature) you to put script into the files that could (vulnerability) allow script to run in the context of the deployment.
This should be called out explicitly in the docs.