"...for running untrusted code (model output, ..."

Hmm...