[travcunn]

It doesn't stop a lot of people from using it though. A quick search of Python code on GitHub for 'import pickle' shows almost 800,000 results: https://github.com/search?l=python&q=import+pickle&type=Code... And that's just public repos. Who knows how much it is used in private repos?

[dalke]

My own code uses pickle. The problem is using untrusted pickles. My scan of a few dozen of those pages shows no insecure use.