I am not sure what you mean with Python and pickle. You get a binary blob with data (dict, list,...) as an input and bring these data in memory.

This is the same as reading a file in, getting data though a http call, through user input...

Of course you must marshall what you get before using it further - but that does not depend on the source once it is not secure /trusted