That's the wrong question to ask.

The right question is whether I have made any important files world-writable.

And the answer is “I don't know.”

So, containers.

And I run it with a special user id.