For context, we removed safe mode because it was an attractive nuisance -- claiming to be secure, but actually very much insecure. We evaluated options to fix it, but the conclusion was that we couldn't do that without a wholesale rewrite of LilyPond. We're sorry for the inconvenience. Please trust us that this was the best path forward.

Speaking for myself, the goal was to ask a question; sorry if opening a ticket was not appropriate, I don't know about how things are done here. I think it can be closed now.