The most battletested way is via bindings to other languages. Ex. mlua with luau sandboxing Or Javascript via v8 or deno_core

There are also a few languages implemented in rust like rhai

There is also the option of compiling the user code to wasm and using wasmtime to run it