Plus, for the last many years there's been a big warning at the start of the Python documentation. Quoting from
https://docs.python.org/3/library/pickle.html?highlight=pick... :
> The pickle module is not secure against erroneous or maliciously constructed data. Never unpickle data received from an untrusted or unauthenticated source.
(In the 2.6 documentation, the warning was not quite at the top of the module. It moved up for the 2.7 release.)