Someone could put a symlink at that location to direct the output to clobber or create a file under your control.