You could prevent this even with --dangerously-skip-permissions with a simple pretooluse hook.