Even read-only files can be written to, leading to a dangerously general purpose elevation-of-privilege attack.