Why even have syntax you don't want people to use? Especially for a language as opinionated as python.
Madness string 93371
Lilypond's safe mode sounds a lot like Ghostscript's safemode, and that gets broken regularly like every six months, so I suspect it's similar to that.