Comment by zdragnar

No outgoing http requests, no ability to connect to an external database such as mysql- only SQLite is used.

No explanation for what vulnerabilities standard Drupal is actually being hardened against.