It's surprising to me how little people understand of how LLMs work. How does someone think that an LLM will just exec() random Python code into its own process? It doesn't have access to that, any more than Notepad has access to execute stuff you type up in the document.