Emacs has no sandbox. Every package you install runs arbitrary Lisp with your full privileges: your files, your credentials, your network. This makes me really scared of installing new packages, or upgrading existing ones.

The packages most of us use are not vetted artifacts: MELPA builds from some repository (usually …