I'm not so versant about the state of permission / capability systems on Linux. But if there is a way for you to drop the capability to modify the filesystem b

I'm not so versant about the state of permission / capability systems on Linux. But if there is a way for you to drop the capability to modify the filesystem before running the first pipeline, you should definitely do it by default (and provide a switch to override it if somebody knows what they are doing.)