Compiling untrusted LaTeX is native server execution. The current environment can run LaTeX with shell escape disabled, resource limits, timeouts and a dedicated non-privileged account — but it does not yet provide the strong operating-system sandbox required to safely accept arbitrary public LaTeX projects.
We do not weaken the host security policy to make this appear ready. The tool remains visibly restricted until adequate isolation is available.

