In case you missed it you can now access web connection and database connection details in python now.

Using the SystemCaller and PythonCallers in the past have always enabled remote code execution but since FME 2023 now your connections are also exposed. 

Just a reminder to never run what you don’t trust.