Yeah, I think it means just that. I guess there is some conceivable exploit where you compile some hostile code written in a safe language to C++ with MSVC and

Yeah, I think it means just that. I guess there is some conceivable exploit where you compile some hostile code written in a safe language to C++ with MSVC and then run it, and the attacker could exploit this bug somehow? But who does that?