[bawolff]

The best way to mitigate is to setup permissions on files so the user cannot read/write things they arent supposed to. Anything else is tempting fate.

[Tepix]

That's just reading and writing. But there are more things you can get access to.