Comment by silver_sun

But if an attacker can put arbitrary code into your .bashrc, you are already executing arbitrary malicious code.