there's an infinite amount of ways to delete a file. deny listing commands doesnt work.
python3 -c "import os; os.unlink('~/.bashrc')"
Of course there are many ways but LLM don't use them. They use standard commands and you will get a confirmation prompt in the terminal where you can deny and you are thrown back into prompting.
Choose whitelisting over blacklisting, like making your own tools that you give to it, and allow nothing else.