What could possibly go wrong executing random programs together in one of the most complex runtime environments ever conceived on processors incapable of preventing timing attacks across privileged domains, let alone in the same address space.
They do state they have considered timing attacks though I do wonder what their mitigations consist of.
When will workers receive proper routing? Right now a single script which triggers on _every_ route is somewhat meh.