> So if you can execute arbitrary code in a new-gen cabal file, apart from the security aspects, ...
well config files could use different (not .hs) extensions. They could use their own Prelude and not allow importing other modules.
The main benefit is to reuse existing parsers and simplify code-config sync.