yes
> what makes it not perform rm -rf /
by default -- regexes and prayers, but you're expected to use sandboxing