This folder contains some suggestions on how to sandbox various workflows (use cases) for some good balance of security and usability.
These recommendations are just my opinion, and certainly not authoritative! I'm not responsible for any negative consequences you suffer if you apply my ideas here.