Is calling install_code with untrusted code safe?

[qwertytrewq]

@Severin seems to disagree with you:

He wrote “Now, with locally timing out canister requests, you will (after 5 min IIRC) get an error because the request failed.”