GP says "You don't want to just run that code in ... even a very well protected VM." Why?