I often use docker or bubblewrap as a sandbox for untrusted files on my own machine, but spinning up an ephemeral server/broker to deal with an untrusted machine is next-level!

Makes me want to set up a burner GitHub account for this kind of thing. Just pull a tar, follow some prompts and let it rip.

I might actually find this useful some time. Thanks lionello