the point is that *YOU* control where to bind stuff in your own namespaces. if you do not trust that directory, then do not bind it over /dev or /bin or any part where programs expect some sanity. the fact that you see or not see the files does not matter. say you take someones contrib directory and bind it before /bin. then the people controlling that directory can make files appear and disappear and replace your /bin/rc.
you also need to trust the hostowner of the machines you do your computation on. -- cinap
