My own code uses pickle. The problem is using untrusted pickles. My scan of a few dozen of those pages shows no insecure use.