What probably matters to youSection of the release
What
Plugins can play audio and can write files and resolve ancestor directories from a hook. Audio playback is refused for anything that is not a loaded plugin, and ancestor path resolution is guarded so a plugin cannot walk outside the project.
Evidence
audio.play: not a loaded plugin
Strings lifted out of the shipped bundle, so the claim above can be checked against them.