> That leaves only one option not reliable but more reliable nevertheless: Human review and oversight.

Couldn't non-manual oversight also help e.g. sandboxes?