Wouldn't it be sufficient to "just" write a kind of context manager that watches the macro expansion and then looks at each step what's being done and divvies that up into safe and unsafe execution, so that at least the example of the article

  (rx (eval (call-process "touch" nil nil nil "/tmp/owned")))