The buttons belie the existence of an API that can "instruct the hosts to do things". Some of those "things" are pretty powerful. Without knowing what those th

The buttons belie the existence of an API that can "instruct the hosts to do things". Some of those "things" are pretty powerful. Without knowing what those things are, I'll just take your word for it that none of them could ever possibly be leveraged to compromise a host or guest without unmaskable and permanent messages appearing in the logs.