Architecture Note: Rendering Third-Party glTF Assets Safely in Babylon.js
A minimal architecture for loading untrusted GLB files in Babylon.js: restrict loader plugins, contain the asset, enforce trust boundaries on external references, and verify teardown.