I imagine any lang with an eval is hard to sandbox...
# general
e
I imagine any lang with an eval is hard to sandbox securely with just ASTs