Description

It just seems like a massive security risk.. I can see there are measures in place to make it less so, but imo it would still be better being disabled by default.
Config I can understand, but mods and other files (namely scripts from KubeJS or CT (tho CT is more sandboxed)) essentially gives the server remote code execution access.