Of course, until someone finds a vulnerability, or a way through the validator, or an exploit on an abstracted function.
Still, it's a good security model
Worth looking at too: zeroVM http://zerovm.org/
