I remember reading ~10 years ago that mode-lines were considered to be insecure (you are parsing arbitrary data as configuration options) and have always had th

I remember reading ~10 years ago that mode-lines were considered to be insecure (you are parsing arbitrary data as configuration options) and have always had them disabled in my .vimrc. I'm surprised they haven't been disabled by default (even in neovim). EDIT: I probably was reading about CVE-2007-2438, another mode-line based RCE attack.