IDEs and such prompt the user whether they trust any new repositories they open. If Emacs had similar functionality, elisp eval could simply be disabled by default and users would then M-x trust-this-repository to permanently enable it again for the repo they’re in.

…all y’all know exactly how to avoid an emacs vulnerability, but I’m afraid to VoIce My opinion