For Python this is only true for wheels packages. Source packages may execute arbitrary code in setup.py during pip install (compiling C code for example).