That explicitly requires superuser permissions. If you give those out, the user has plenty ways to code execution. (And as mentioned elsewhere, that's server-s

That explicitly requires superuser permissions. If you give those out, the user has plenty ways to code execution. (And as mentioned elsewhere, that's server-side, not the server instructing the client to send files as in the tweet.)