If within the context that parse and execute user input, sensitive data is available, then what this has to do with New-Style String Format? I mean, {event

If within the context that parse and execute user input, sensitive data is available, then what this has to do with New-Style String Format? I mean, {event.__init__.__globals__[CONFIG][SECRET_KEY]} Shall not be available to any function call, whatsoever!