I know sandboxes for wasm are very advanced, but decades of file formats with built-in scripting are flashing the danger lights at me.