Python wasn't designed from the start with this kind of security concern in mind. It could have been, like http://erights.org/ http://erights.org/. In such lang

Python wasn't designed from the start with this kind of security concern in mind. It could have been, like http://erights.org/ http://erights.org/. In such languages it's reasonable to say "you can write a user-level drop-in replacement for eval(), and therefore we can make the built-in eval accessible to all code without any extra security-design concerns" (though of course you still need care in implementation).