Absolutely, I agree now that I see it, and these seem like numerous innocent-seeming footguns just waiting for abuse. Add the not-too-far-fetched-seeming assum

Absolutely, I agree now that I see it, and these seem like numerous innocent-seeming footguns just waiting for abuse. Add the not-too-far-fetched-seeming assumption that it’s fine to let the Internet define your environment variables, and it’s a plausible exploit. This is why, as another commenter points out, defense in depth is so important.