the system attribute is that better defense, changing explorer's options to display such files results in the following warning
https://i.imgur.com/uUaJEZI.png
if it was done via a VM, people would just mount the VHD, edit the files, and still complain