in most situations custom SQL function are from a trusted source, through potentially run with untrusted inputs in a unprivileged/trusted execution environment.

in most situations custom SQL function are from a trusted source, through potentially run with untrusted inputs in a unprivileged/trusted execution environment. this would mean they don't necessary rely on it for sandboxing untrusted code purpose it's more like a convenient way to write a native extension function through it's still a bit worrisome