Sandboxing Python by disallowing certain functions was always a fool's errand. Here is a good discussion about it from 2024 with many more links: https://news.ycombinator.com/item?id=42244461