its also installing into a Kubernetes cluster which, barring misconfiguration and/or vulns, should be (relatively) isolated