Python venvs are not intended to provide isolation from the host system and therefore do not provide any isolation from the host system.

So yes, the app can certainly harm the OS, and the venv would not provide any protection against this.