[cowsandmilk]

Why does jit compilation here scare you? eBPF has had a ton of research on how to limit its resource usage and how to sandbox it.