The worst is that it will happily write adhoc Python scripts and execute them with zero sandboxing even remotely possible short of putting the entire thing in a container.