Damn, I got another idea. "What if you could install packages as inert data packages and work with them with roughly the same API as `importlib.resources` but with the reassurance that no code runs, no pth shenanigans, no malicious code on import, no setup.py japes.
Well, there goes the weekend. Or the next, also gotta finish this last idea.