With a bug like this, an install script without root permissions can still wipe out your $HOME when messing around in the dotfiles. Scary!