Isolation is always key. Remember, sudo can also be used to de-escalate priviledges to a different user account where it's harm is more limited. Or better, if

Isolation is always key. Remember, sudo can also be used to de-escalate priviledges to a different user account where it's harm is more limited. Or better, if you wanna run malware for fun, run a VM with an isolated network connection that only routes out to the world via a separate VM that pipes all traffic over a crappy commercial VPN service or Tor. That way if you piss off any script kiddies they can't DDoS you.