if its in a secured and completely isolated sandbox that gets destroyed at the end of the request, then how could it he “insecure”