Though obviously, something like scp evil_passwd_file terminal.shop:/etc/passwd or scp evil_authorized_keys terminal.shop:.ssh/authorized_keys is re

Though obviously, something like scp evil_passwd_file terminal.shop:/etc/passwd or scp evil_authorized_keys terminal.shop:.ssh/authorized_keys is really the kind of thing you don't want. But if you can't copy foo.txt into your home directory, you probably can't copy attacker versions of more sensitive files into sensitive locations.