Comment by silver_sun

If you're running a malicious user process with write (or read) access to your files, you are arguably already compromised.