Have you ever tried to embed a python interpreter? Lua is both easier to embed and allows you to have a strict interface. Look up the history of bastion/rexec

Have you ever tried to embed a python interpreter? Lua is both easier to embed and allows you to have a strict interface. Look up the history of bastion/rexec in Python - with python there's no possibility of controlling untrusted code.