Suppose you prevent those 4k+ libraries from running code during install: you're building software that you'll run immediately afterwards. If you don't trust t

Suppose you prevent those 4k+ libraries from running code during install: you're building software that you'll run immediately afterwards. If you don't trust those libraries enough to run code during installation, why do you trust them enough to run code _after_ installation?