I think you can have an interpreter underneath, as long as it can't obtain code that isn't shipped with the app.