Hacker News Reader

I figure comprimising alien/userland code could well be an issue, something like Javascript in a browser.

I assumed that the GP included userland, and the browser, when they advised only to run trusted code.