Why can't it just be a basic text editor?!
Users could be tricked into running arbitrary code, but the issue was patched last week.