Could the security hole not be closed up?

Maybe there's a way to run them more securely with a wrapper.

It does make sense to try and move to a sql db of some type, and my immediate thought is if something like Postgres, with a plugin or extension or two couldn't simulate enough of Foxpro.

That, or rewriting large parts of the DB engine seem readily much more possible now with LLM driven development.