Comment by plagiarist

Because it is running with --dangerously-allow-all and can make HTTP calls to exfiltrate data.

It can also install arbitrary software.