So as long as you're using it properly and diligently filter all user input before it hits your cython, and don't make any mistakes it's fine?