private data + untrusted content + outbound capability = hard stop
a markdown file is a wishlist, real security lies within hooks and plugins