To help control user management and data security issues I think we need to abstract out a logical layer or module of the program to handle access to data in a similar way to the way Unix systems handle access to disk drives. While it is not like that high level Python code will be able to enforce anything, by abstracting data access out into access control module(s) we should be able to prevent the coding mud pie that will lead to problems with leaking stuff we don't want to leak.
To help control user management and data security issues I think we need to abstract out a logical layer or module of the program to handle access to data in a similar way to the way Unix systems handle access to disk drives. While it is not like that high level Python code will be able to enforce anything, by abstracting data access out into access control module(s) we should be able to prevent the coding mud pie that will lead to problems with leaking stuff we don't want to leak.