Is that the problem? 1. Most hosts have some secrets. For example, client credentials. That's hard to avoid unless you just don't do auth at all. 2. Most host

Is that the problem? 1. Most hosts have some secrets. For example, client credentials. That's hard to avoid unless you just don't do auth at all. 2. Most hosts let users ssh to them. 3. What you've described is the cloud provider/ PaaS model. 4. It's not that easy to just "keep untrusted code" out. Like, what if an attacker exploits an exposed service and then wants to privesc?