Comment by Norther

What's stopping a Bash script from doing something similar? You could alias ls to a malicious actor for example.