Pickle is so hard to get write that on my org we forbid ever accepting untrusted pickle input. We basically treat it like it’s an eval.