But they do allow arbitrary code execution inside the Linux VM. You can also write your own extensions which is not arbitrary code but pretty close. Maybe arbitrary userland code is the correct term here.