This looks risky to me. Rust is not a sandbox language. It's designed to catch accidental mistakes, not intentionally malicious code.

They've taken extra precautions to plug known holes, but it is using Rust beyond what it was designed for.