Comment by throwaway2027

All of which is useless when it just starts using big blocks of python instead. You need filesystem sandboxing for the python interpreter too.