so you're saying there's no way to know if a file is safe or not, i mean there's very trusted sources in this community. how should we know then?? and is running a vm really safe? what do you mean by hardened sandbox vm?