2 ms·

For the most part I agree, but giving out full path names definitely can make exploiting other holes easier.