You are technically not wrong, of course, but if the attack vector got already to running Makefiles on your system, you should probably focus your effort to tig

You are technically not wrong, of course, but if the attack vector got already to running Makefiles on your system, you should probably focus your effort to tighten security elsewhere.