I mean this is a framework for a game engine so uhh whatever gets screwed up in Godot also gets screwed up here.
Just don't let your game download scripts off the internet and don't mess with the filesystem or anything I guess.
Create a new Bug Report issue and choose the "Security" category.