Do you think that providing simple, javascript based bookmarklet would be a good idea for the security issue?

Here are the docs for prepopulate to diy bookmarklets : http://drupal.org/node/235074

I don't know the security issues, this involves. But at least it would not need any other module than prepopulate.