Eh, if an attacker has filesystem access you're already pwned.