There are a lot of ways to DoS a commercial build service. If you let people execute arbitrary code on your machine, you better have logging in place to know who is responsible if your machine crashes.

I'd assume that most build farms build on VMs to avoid exactly this kind of problem -- building on bare metal seems pretty risky.