Though obviously, something like

    scp evil_passwd_file terminal.shop:/etc/passwd

or

    scp evil_authorized_keys terminal.shop:.ssh/authorized_keys

is really the kind of thing you don't want. But if you can't copy foo.txt into your home directory, you probably can't copy attacker versions of more sensitive files into sensitive locations.