It might. The package will need access to the external database, so ports probably will have to be opened. And you're transfering data over the network, so there might be some risk there.