The Python import statement carries a security risk that developers and enterprises need to watch out for. Here's how it works and why there's no easy fix.