I particularly like the scratch containers approach :-)

I mean, yeah, it's just like code. The most secure code is the one that doesn't exist!