But that is one reason I do use sudo. I have some extra user accounts that I can sudo into to run scripts, plugins etc from e.g., github that I trust somewhat

But that is one reason I do use sudo. I have some extra user accounts that I can sudo into to run scripts, plugins etc from e.g., github that I trust somewhat but not 100 percent. In case they do start mining bitcoins or sending spam mail I will find out and stop it.