wonder if bun also has a different approach to security when it comes to installing packages and running their scripts and/or using file system at runtime, e.g. not giving access to the whole machine's file system like Node?