For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
FT App on Android & iOS。搜狗输入法下载对此有专业解读
，更多细节参见Safew下载
（二）利用网络对未成年人实施威胁、侮辱、诽谤或者恶意损害形象等欺凌行为的；
2025年育儿手记：从家到幼儿园。heLLoword翻译官方下载对此有专业解读