<p dir="auto">why not sign the exe？</p>
<p dir="auto">Currently, deno allows disk read access without a flag. The idea behind this is that although programs may be able to access secret info (e.g. your ssh key) without network access or disk write access, there isn't anyway they could exploit that knowledge. It's meant as a connivance.</p>
<p dir="auto">Environmental variable access is quite similar to disk read access. If you can access the environ without having write or network access - there is no way to exploit that.</p>
<p dir="auto">This seems to be a double standard. Thus I propose we either remove --allow-env and treat it as read access to the disk. Or we get more constrained and bundle and add --allow-read for disk access.</p>