Comment by z3t4

Once you have set up the namespaces you drop all capabilities so if the program gets hacked while it's running it can do very little.