tldr;

private data + untrusted content + outbound capability = hard stop

a markdown file is a wishlist, real security lies within hooks and plugins