Any join should be fine as long there is no magic in extension that is using result of the query to build new query, or extension that allows access to osqueryd from user space. I can't say its 100% since there is no full report on vulnerability