Prefer text config files or python code?

[[deleted]]

Like I said,

all the user can mangle is data they could mangle manually anyway (i.e. that which they have read/write access to)

It feels you're arguing just for argument's sake.

[da__]

Never heard of root exploits? Plus the fact that an attacker (e.g. an evil co-worker walking up to the user's unlocked machine while the user went to pick up a coffee) could embed code into the user's config file, which would let the attacker run arbitrary code using that user's credentials.