It could be better, but we have the most restrictive permissions we can have for now, but we will continuously review this. Also we only allow installing apps from the catalog so there is very low risk atm. Later we plan to allow running any arbitrary image but we need a few more security layers first.