>>334976107
I mean for malicious use of anything you'll always have to trust the other people. For a restricted environment like vrc, there's plenty of bannable things that you could do all the time. However in this case it turns out that the way games work is they load their game files from VRC's server, and if you upload game files containing horse dicks, people can load them and enable them. 

Your avatar is a unity game object in a unity process. The unity process is owned by the computer running it. This was always the case.