That's not really a threat model to be concerned about, if someone can define bash aliases for you you're already running their arbitrary code, so them defining

That's not really a threat model to be concerned about, if someone can define bash aliases for you you're already running their arbitrary code, so them defining bash aliases for you should be the least of your concerns.