This is a fair point. Allowing a specific diff program to be specified in the repository configure would basically allow anyone with push access to your reposit

This is a fair point. Allowing a specific diff program to be specified in the repository configure would basically allow anyone with push access to your repository the possibility of executing arbitrary commands on your local machine.