I got so tired of python venvs and craziness that I ended up moving my whole dev environment into docker containers. Guess I've accidentally protected myself against some of these attacks.