Sadly, this monad can't stop you from doing dangerous stuff in the first place, like iterating over the output of ls:

http://mywiki.wooledge.org/ParsingLs