Moved to main, since Alex's answer seems to cover this. Leaving the bug open for security review if wanted.
Moved to main, since Alex's answer seems to cover this. Leaving the bug open for security review if wanted.