> Not knowing that you shouldn't use just any random Python package is a ticking time bomb... especially when his machine is connected directly to his corporate intranet.

Don't worry, I'm sure IT would never give this manager priveleged access to systems permissions.