

6·
22 hours agoThere are plenty of ways to sandbox it. Treat it as an employee, i.e. give it its own user account, use cgroups, API tokens with custom permissions, etc. Unfortunately, the defaults aren’t very secure. And I’m sure most users will just stick with the defaults
Yes, you can do chores: https://en.wikipedia.org/wiki/Wikipedia:Maintenance