Untrusted code must be kept in a strong containment boundary.
- Untrusted code must be kept in a strong containment boundary.
- If you want a system that can build itself, some parts have to be locked down with clear boundaries, otherwise it's inherently dangerous.
- A system that can change itself internally arbitrarily, that allows executing untrusted code, is a dead end.