Is it insecure to put untrusted files in the Songs directory?

[dseomn]

I just learned that some charts can include scripts. Is there any sandboxing to prevent charts from running arbitrary code with the same permissions as the StepMania binary itself? Or any other reason it's safe to put untrusted files in the Songs directory? Or is the expectation that users will only put their own files there, or files downloaded from somewhere that they trust to run arbitrary code?