Definitely it seems defensive measures should be built into the programming toolchain of Ethereum. Like it probably shouldn't allow eval at all. That said, any

Definitely it seems defensive measures should be built into the programming toolchain of Ethereum. Like it probably shouldn't allow eval at all. That said, any form of eval should also be a red flag for security. It seems like in this case cost won over security. And that is fundamentally the biggest threat to security.