they can execute arbitrary code if the provided iterables containing objects with special methods

class EvilMethods:
    def __iter__(self):
        exec("import os; os.system('rm -rf /')") 
        return iter([])

max(EvilMethods()) // here we are executing arbitrary code