For the people who would be using this, they would almost never even have other people's code, say nothing of whether it's untrusted.

Honestly, ASF is literally sandboxed. Objects cannot be injected in the runtime. Also, VBA Expressions is intentionally limited to receive and return VBA strings. So, the system is safe for execute code from (almost) anyone.