> We do need a safe layer for non-engineers to customize apps.

Why? Every time someone cripples software in the name of safety it just gets replaced with more capable software that isn't.