ARP is a deliberately simple protocol. This allows an attacker to launch an ARP spoofing attack, spamming the network with phony ARP packets so that outbound internet traffic gets routed to the attacker's device.