A lot, to the point where there's an entire security page in perldoc: <https://perldoc.perl.org/perlsec>

I wonder if a taint mode for SBCL would mean ignoring SBCL_HOME... that'd be a bit annoying for running more up-to-date SBCL versions on distros shipping with older versions.