Evaluate() may not just calculate, but also access fields, call plugin functions or use FMP functions with side effects.
We like to use Evaluate() to calculate math.
e.g. in a field, user enters "5,5 + 3,4" and on return key, we pass text to evaluate to get result 8,9 and store in field.
But we like to make sure that nothing compromises the security.
The user should be able to do math, e.g. call square root function or use brackets.
But we'd like to avoid calls to MBS functions.