The cups-exec helper program runs backends, filters, and other programs. On macOS these programs are run in a secure sandbox.