pip just stopped promising that installing a wheel runs no code

For years, most Python developers carried one quiet belief: installing a wheel is safe because it runs no code. A wheel is just a zip. You unpack it. Nothing executes. Source distributions run build c