Yeah. Had this conversation with a couple people at Chainguard. I think there's room for improvement on both ends. Every action I look at for this stuff hasn't been touched in a while/lacks maintainers or isn't as effective as ours
Prior one is using /bin/sh and you get access to some shared variables.
Shebang is like a written out script from another file in a subshell.
You can inline python or whatever you want. Personally after a few lines I like to call scripts instead of having a ton of logic inside of the justfile.