Only if it goes through verified bytecode, and the set of instructions is provable.

The JIT must also only be allowed to call into specific code, controlled by the runtime, and nothing else.