Comment by danpalmer

All of the "hacks" (from Google and others) were the same issue – the vendor Irregular running the models unsandboxed.