None. It's a full VM. The user will have to open access to their OS to fuck things up.