[creata]

One basic measure (one part of a solution) would be to split Comfy into two parts: the part that does all the work (running plugins, generating images) should have access to nothing but read-only access to the files it needs, the GPU, and a socket to communicate with the other part.

[badrunaway]

A cleaner API you mean which exposes what is necessary only.

[creata]

I meant sandbox the less trusted bit.