Lilypond security

[John Williams]

I was wondering if anyone knows how secure lilypond is?

For example, if I download a .ly file from somewhere,
has any effort been made to prevent that file from
doing something bad to my system?  For example,
executing arbitrary scheme code which will erase my
filesystem.

Lilypond has ways to reach down into the scheme, TeX,
or postscript levels.  Ghostscript has the -dSAFER option
to prevent most exploits.  I doubt TeX can do anything bad.
But the scheme level makes me very uneasy.

~ John Williams