Cute idea (in a rather dramatic blog post): randomly generate strings for PL keywords, and apply the same transformation to your source code. This prevents code injection: https://blog.polyverse.io/introducing-polyscripting-the-beginning-of-the-end-of-code-injection-fe0c99d6f199 (I suppose you could brute force, and they don't say if it breaks eval.)