In particular, I don't understand why this would be a problem, since the exec would assumedly be run with the privileges and access of the user who ran python.

In particular, I don't understand why this would be a problem, since the exec would assumedly be run with the privileges and access of the user who ran python. python -c "exec(urlopen(...).read())"