How does the security of Gutenberg Cloud work? If it allows a server to run code that was installed by a non-administrator, that seems like a potentially dangerous situation. It pulls code directly from NPM into a live site. Could somebody release a helpful block to the Gutenberg Cloud registry, wait until some major sites install it, then update their block with malware?

And before anybody says how unlikely that attack vector is, it's already been used in a real attack.

If there are protections in place to prevent abuse like that, great. What are they?