That was the case in December. 4 months and thousands of work hours later， we have a great security concept； you can go all yolo， use a sandbox （Docker or OpenShell）， there are allow-lists and per-access exec allow/deny prompts.

There's hundreds of security researchers that pen-tested it.