*transmits gui
*deletes all your files
A client-sided mod can already delete all your Blockland files. Where's the difference?
Regardless, a GUI downloading mod shouldn't allow executing code, however use a specific format to still allow the same sort of actions you'd perform with it (see Blockland Glass).
