It's no big deal as long as JIT compiled code is restricted to the safe subset of instructions. For example, in FreeBSD BPFs (berkeley packet filters) are JIT c

It's no big deal as long as JIT compiled code is restricted to the safe subset of instructions. For example, in FreeBSD BPFs (berkeley packet filters) are JIT compiled and directly executed in the kernel mode.