The script seems to ship with a rundimentary webserver by default, so I don't see a reason to wrap gunicorn et al. around it? However, you're right that overwr

The script seems to ship with a rundimentary webserver by default, so I don't see a reason to wrap gunicorn et al. around it? However, you're right that overwriting the source is a possible attack vector.