False positives (this program could access these file locations) seems like a reasonable tradeoff.