doc,vm: warn more prominently against executing untrusted code
The vm module is not a security mechanism. There used to be a prominent warning against executing untrusted code but it seems to have been removed in recent years.
I think it would be good to bring it back because the language around sandboxing can mislead users into thinking the vm module is something it's not.