Fair enough, good points. Really what I should have said is that if you're running on an untrusted system, it should be in an isolated environment (sandbox, con

Fair enough, good points. Really what I should have said is that if you're running on an untrusted system, it should be in an isolated environment (sandbox, container, etc.) which would preclude using a shared system binary. Statically linking your own executable would be another way to satisfy that constraint.