That example requires the user to copy something to the home directory. If you copy something to /tmp, or to a subdirectory of your home directory, that attack

That example requires the user to copy something to the home directory. If you copy something to /tmp, or to a subdirectory of your home directory, that attack is not possible (according to my understanding)