It's the same security model as downloading a binary and running it.