Comment by lxgr

If it can open and write any file on the OS, it's pretty much game over. Too many ways to exfiltrate data even without network/socket access.