Python eval really is dangerous
nedbatchelder.com
nedbatchelder.com
There's probably a corollary that no input is trusted.
But eh, I've had scratchpad scripts where I lazily used exec or eval on commands that were programmatically generated (not entered by user or from outside programs).