On the topic of untrusted executables, is there a decent GUI to run arbitrary programs inside the MacOS app sandbox? Last I checked, users still had to fiddle with config files and command-line incantations, but at least it was possible:

https://paolozaino.wordpress.com/2015/08/04/how-to-run-your-...