Right you are, ken!

But seriously, we need docker for models like years ago. I dont want these things running with the ability to run rm -rf /

its should be treated no different than wget | sh