Converting user inputs to Perl code safely is tricky and if dangerous if you fail. When using sum, nothing from the user is converted to Perl code and executed.