2
Well you should of course take the warning seriously and using the protector is always a good idea.
I havent any experiences with this module but a quick glance at the code shows for instance that input-to-queries not are sanitized. So this at least is a place to start to fix :)