Possibly, but what happens if a faulty script does a `rm` too much in that short time window? The kernel fix prevents that, using mount flags alone only restri

Possibly, but what happens if a faulty script does a `rm` too much in that short time window? The kernel fix prevents that, using mount flags alone only restrict the vulnerability but it doesn't make it go away.