Good point. However I'll note that the risk is somewhat less when it is run in an external process. Though admittedly, it is not totally gone.