> Why does every build have the ability to run arbitrary code by default in the first place? Nearly every time that you see a build script in use it's to suppo

> Why does every build have the ability to run arbitrary code by default in the first place? Nearly every time that you see a build script in use it's to support building C code, which has no standard build process and which often involves executing shell commands, and the shell itself is an arbitrary code execution environment with arbitrary access to the network.