Indeed, but a rock solid sandboxing and isolation strategy is step 0.