I was expecting something much more subtle. I guess the best course of action to prevent this would be to alias rm to a custom script, then parse the arguments

I was expecting something much more subtle. I guess the best course of action to prevent this would be to alias rm to a custom script, then parse the arguments to make sure the root directory is never recursively deleted, then calling rm from within your script.