> since you can express cycles with hard links

You can't if you only allow hard links to files.