Anyone with the link can read a paste. Everything is shown as plain text; nothing pasted is ever run.