How did they fix that, in the rm binary? In the example above, the command would be `rm -rf /` without the variable present, and the shell would expand / to al

How did they fix that, in the rm binary? In the example above, the command would be `rm -rf /` without the variable present, and the shell would expand / to all the folders in /. So it's not a direct call to `rm -rf /`, you would need to handle the shell expansion of /* as well?