That's a pretty lousy take. Obviously, stuff that executes as your user act on your user data. Why would you even have a line of code that you don't trust on yo

That's a pretty lousy take. Obviously, stuff that executes as your user act on your user data. Why would you even have a line of code that you don't trust on your machine? `chown` it if you care that much. Also, to the parent comment -- you should be putting stuff in ~/.local anyway, not in the top-level home directory.