I don't think that's quite right, if I understand correctly you could have the interpreter so long as there was no download and run of external code.

I'm sure I've seen a Lua environment like this.