Great observation about Python scripts in the downloads folder. Here's a way to make this vulnerability even easier to exploit: Place a `sitecustomize.py` file

Great observation about Python scripts in the downloads folder. Here's a way to make this vulnerability even easier to exploit: Place a `sitecustomize.py` file in there. That way, you don't even need the `-m pip`, since that file will be imported automatically on any Python run.