The thing that freaks me out about Pi is it seems to have zero sandboxing or security guardrails unless you explicitly add them. I guess it's fine if you're only ever running inside a VM or a throwaway machine anyway.