E and Monte have safe eval() as a consequence of being object-based capability-safe languages; there's no way to cause any effect outside eval() worse than an infinite loop.

To the second part of your question: as you have undoubtedly noticed, you've never heard of E nor Monte.